Security expert shares what companies are not doing enough of to protect employees and how to prevent problems before it happens.