It’s not a question of whether a given company will be hacked — it is a question of when. An ounce of prevention is worth a pound of cure… but how?