What companies need to know about the Obama administration’s cybersecurity order