Protection from hackers looking to steal account data.

  What can organizations do to protect themselves from hackers looking to steal account data? What would you do to continually monitor your information systems to ensure that data are secure?