IT security costs can be managed by simplifying and effective restructuring what departments already have.