Companies are learning that it's not enough to patrol their information technology systems for potential threats from thieves, hackers and saboteurs.