Since poor password controls act as a Santa Claus for spies, make sure your security team is tasked to be on top of any policy violations. Also have your computer security team address the problem of encrypting sensitive e-mail communications. In the eyes of most laypeople, encryption is encryption, any flavor will do. Unfortunately, not all encryption protocols offer equal protection. Indeed, using one that's inadequate for the job at hand may be worse than no protection at all.
Poor encryption offers a false sense of security.
Competent cryptographers know and understand the mathematics behind the protocol and consider the functions used as sound. Tested and critiqued by experts. Your security team should be able to run the names of potential algorithms using search engines on the Web and obtain reviews on the products. Good key lengths . The longer the key, the tougher it is to break.