Finding optimal solutions to security issues is verydifficult or impossible. Conflicting interests and values decidewhat has to be done. Every thinkable answer contains both risksand possibilities. I our effort to find solutions we have always tonegotiate and make compromises. A dialectic process is necessaryin security in order to identify significant interests and values,and to formulate principles and policies. Handling security issuesand working for secure IT systems demand continuousadjustment to relevant values as well as the necessary personalskills and suitable group processes. Focusing on the method andmaking sure that the right way of proceeding has been adopted isthe way to get satisfactory answers to the problems of IT security.The philosophical method of deliberative thinking seems to be thebasis of such methods.