In the long term there are potentially other technological solutions to these issues. Evolutions in sandboxing (broadly construed, everything from what we see

In the long term there are potentially other technological solutions to these issues. Evolutions in sandboxing (broadly construed, everything from what we see with mobile apps up to full virtualization) may give us a point at which an IT department can, for most businesses/purposes, reasonably satisfy itself of the security of the "enterprise apps" running on a non-malicious employee's laptop, without completely taking over the system image.