I understand that IDN's are basically a GUI display change for domains that have a prefix of "xn--".

What should I advise companies do in regards to these domains?

For example, should companies actively seek out and register domains in alternative (similar looking) character sets? What tools, or logic should be followed?

Are there any known certificate validation issues?