I think some people choose IT or Engineering because they like black and white answers to everything. You can't BS past the laws of physics. This I-beam meets the load requirements or it doesn't; this cable can carry sufficient current for the motor or it can't, this hard drive can hold all the data or it can't. No nasty grey areas.
Of course, once you add human beings and their conflicting needs and desires into the mix the grey areas abound. The problem for this kind of person comes comes when they start treating their own rules and policies as if they were laws of physics (and expect everyone else to do so also). They see themselves and their policies as holy guardians of their systems integrity and despise the "lusers" who try to work around them and violate their rules. Their users see them as rigid, obstructionist and in the way of productivity.
IT security and operational flexibility are opposing goals. If your systems are completely open you'll be down with viruses and trojans, lock them down 100% and nobody will get any work done. You can't go all one way or the other, you need to find workable compromises.