While there is no way to guarantee that an organisation will never be attacked, they can take some simple steps to protect their business