The first step businesses should take to protect their consumers, networks and financial accounts