Data protection policies need to be well thought out and consider not only the systems in direct control of the business, but also the credentials by which employees can access those systems remotely. Beyond policy, though, awareness is a key element to the protection of data in your business and in your home.

By Jeff Williams, CIPP CISSP
http://www.microsoft.com/technet/community/columns/sectip/st0607.mspx

Urs