The tools used by IS Security can help detect cases of Information Disclosure.
Lets look at some examples.
ISS can detect hosts that NFS world export their file systems. When you run ISS with the -y option, it will also check for really dumb choices for YP domain names. Perhaps you are thinking, ah, but I have a firewall, inside we can do anything we want because the firewall will protect us. One of the curious side benefits of electronic mail is that people will use e-mail to either send information that they would send as hardcopy, or to send information to people that they would never send hardcopy to. Over time, a well run organization will get some semblance of a handle on the mail that goes out and comes in through the corporate mail relay.