Four strategies for reducing security company risks