The statement "IT security is about internal firewalls, internal intrusion detection, policies and procedures, training, and awareness." helps answer the question "What is IT security about?"