The perils of lax security hygiene and what organizations can do about it