While there are existing legal frameworks, McMurrough and Fein said, companies can prepare by examining their posture for dealing with particular types of risks.