Understanding the distinction between security and IT can save your business time and money