Even though the stakes are high, too few businesses are taking steps to protect themselves