Preparing IT Security for Unpredictable Cyber---threats