No media source currently available
Researchers say policies designed to protect companies from computer attacks are not strong enough.
