IT SECURITY ROADMAP AND DESIGN