The four IT security principles