Information risk can largely be mitigated by technology (hardware and software) fixes