We control all access points to the network. That means secure authentication to dial in to the network and firewalls around all the Internet servers.

We know we'll never have 100% foolproof security, but we can keep the risk at acceptably low levels.

It's been a hard lesson learned. We are now especially emphasizing the importance of not sharing passwords.