IT risk prevention