IT security Statement