More than IT security
When we talk about IT security, we should really make it clear that its not so much the IT we're protecting, but rather the information which is contained, processed or transferred across the systems.
From: http://www.infoseccynic.com/2008/08/31/trusting-it-security/
"...security doesn’t reside in IT. Neither does it reside in people. Security should be built into the very fabric of all systems, people and processes. If IT security man thinks that by imposing a long password will make his system secure, he should go back to playing with his fart putty. In fact, I would even go as far as to say that there is no such role as IT security. Simply IT administrators…. and the quicker we realise this, the quicker we can improve our security."


