This article covers some really important points such as legacy (old/ancient may be archaic) systems being connected to the company infrastructure, giving administrative privileges to an average user and the importance of setting up proper file sharing. It also highlights however, the enigma that is the employee.
According to him, “Good governance, education, setting (and enforcing) policies, and knowing your employees are your best steps to closing the holes here.” This is all well and good in the ideal situation. However almost anyone in the working world will tell you that the close to ideal/ ideal environment happens once in a blue moon.
My opinion: the best of the statement is knowing your employees. For if you know your employees, you will know how best to implement these measures. Some will automatically go along with the establishment of policies and educating themselves on the issues whilst others are skeptic kings who you will have to deal with over time.