A journey from Configuration Management to Security of IT systems