Data Theft Prevention: Companies Lack Policies, Knowledge