IT security is not just about firewalls or antiviruses, it is also about people. It's about mobile devices that we carry with us.