Most Fortune 500 companies still opaque about security measures