where does these places get the idiots in their IT departments?...but okay suppose at allot of smaller businesses confidentiality is of little importance, but doing some work for companies developing military equipment, emails are regarded as one of our number one "suspicious mediums" for corporate espionage, but okay then, par to securing your IT you also need to run a strong physical security as well ensuring that either someone doesn't have a memory stick on site, or ensuring that you get alerted if "secure data" is being copied. And if u still use a memory stick on site which really ought not be necessary on a corporate network) then ensure that it doesn't leave the sight.