"Some best practices have emerged that are specific to how companies" . . . .