The layered approach to IT security