Browsing: information technology security assessment