Should digital or technology security be treated any differently to any other form of security management?