Corporate legal and compliance chiefs would be wise to study the U.S. Securities and Exchange Commission's action against Morgan Stanley over the firm's alleged "astonishing" failure to protect the data of millions of customers.