How to protect the enterprise from holiday attacks