Security in the public sector: The why and how