Three basic security practices banks need to implement now