How should a start-up establish an intellectual property protection system when there is no ip department?