Basic assessments for IT security