The funny part about all of this to me, is that if most companies with data to lose aren't already taking these recommendations.. then they've already been cracked.

Most of this report is pretty simple social engineering tactics/table stakes.