Let's think about that for a second. The answer to those questions lie in the tools and procedures you take. One of the things I like to stress to all companies that I have dealt with is end-user training. This is a very important measure to take. We do not have to be reminded that our end-users have access to some or all of the company's data.
Accidents do happen, over and over and over again.
In order for us to eliminate the chance of accident, we must put aside the time and investment in our employees training. Simple training programs that will properly train the end-user on the operating systems and applications they need to perform their job duties is a start. Well, why don't you ask the powers that be how valuable the data that sits on your network is. This should get them interested in the topic. Well, this is where intrusion detection software tools come into play again.