“Often” false. I’d bet 60-70% of the Fortune 500 doesn’t fully adhere to these “best practices” maybe only the government when handling classified information comes close.

They're not talking about Fortune 500 companies, they're talking about the literal government and the rules for sharing information between agencies.