Localization, localization, localization. Tighten up the security for tiny islands within the organization. Don't just do perimeter defense [1] and don't give a

Localization, localization, localization. Tighten up the security for tiny islands within the organization. Don't just do perimeter defense [1] and don't give a single computer access to thousands of other computers. Don't route and don't monitor everyone's emails through a single server. Use end-to-end encrypted email and ephemeral messages, as Schneier says. Something like Kobeissi's new Peerio tool would've helped Sony and MPAA from having embarrassing emails leak out (not that I wasn't glad to see them leak out). [1] - https://community.rapid7.com/community/infosec/blog/2015/01/07/the-sony-breach-demonstrates-the-importance-of-moving-beyond-perimeter-defense https://community.rapid7.com/community/infosec/blog/2015/01/... [2] - https://peerio.com/ https://peerio.com/