Qantas group security head Steve Jackson has some simple rules for dealing with IT security: Don't panic, don't overstate the risk, and don't give the wannabe criminals the free oxygen of publicity.