On November 24th, a post on Reddit announced that Sony Pictures Entertainment (SPE) had been hacked by a group calling itself the Guardians of Peace (GOP). Since that time, a steady stream of claims, counterclaims, data from the breach, and reports about that data has occupied both mainstream and IT-focused media. There are lots of open questions about what happened, who exactly is responsible, and what the long-term impact of the breach will be for SPE. The more important questions to ask right now, though, revolve around how to ensure that you’re not the next high-profile organization to have its security woes splashed across the front page of the New York Times and CNN.