They can use hardware wallets for digital signing the operations, and keep encryption keys offline, split the keys to make sure that there's no 1 person that ca

They can use hardware wallets for digital signing the operations, and keep encryption keys offline, split the keys to make sure that there's no 1 person that can access it. There are lots of tools for key management, but lots of companies don't care about it.