prevent costly security incidents