> Fortune 500 security policies are a mixed bag

A research effort into the security practices of Fortune 500 companies has found that while a majority of the largest US public companies are following the Securities and Exchange Commission (SEC) Guidelines by providing some level of disclosure regarding data breaches, some companies that have had exposures have chosen to remain silent. And, companies may be underestimating certain risks, like state-sponsored cyber-espionage.