Security expert explains how companies track threats