IT security is about internal firewalls, internal intrusion detection, policies and procedures, training, and awareness.