Surge protection for information technology