The problem with a security vision for a small company is that the people who supply the goods and services to fulfill the security vision are pricing them for the Fortune 500. From trusted sites, I will accept .rtf files or .pdf files, but anyone who sends me a .doc file gets a note that due to security restrictions I cannot accept a .doc file.
Any executable attachment is deleted without hesitation.
As with any intelligently-managed site, all ActiveX controls are blocked for my site. Only a fool would let an ActiveX control to download from the Web. The best security system will not help you if you invite the vampire into your home. We need security solutions that are fairly priced, not priced to all the market will bear. We need solutions that do not involve tens to hundreds of hours to intall and maintain.