Even with a slew of new security tools and compliance guidance, there are still things you can do to protect this critical business system.