(e.g., ISO 17799 and ISO 26001), strict access controls, IPSec virtual private
networks for communicating with customers, nondisclosure agreements, and
background checks [55]. In general, these strategies are geared more towards
preventing intellectual property theft—but this shows that these firms are willing