as someone in the space i can assure you they aren't taking the appropriate measures. best practices are known, but aren't being shared publicly b/c the info is an aspect of competitive business intelligence.