How can organizations effectively protect their operational systems against attacks that can have significant business and security implications?