Understanding IT Security and BYOD Policies