With these controls in place, businesses are generally considered to have done the best they can to protect themselves.