Cost-effective IT security