How Best Practices Have Changed to Address New Threats