Except for the protection of customer data by encryption, everything
else seems to be related to your particular management practices:
install a firewall, run antivirus programs, have an information security
policy in place.
So what else falls upon an application like OFBiz, in your opinion?