Reads like "phishing for a budget to me"

The solution is pretty simple at the higher level, and it is to use private secure networks. Nothing is allowed access to or from the public internet. Of course segregation costs money and people don't like the extra effort............. but when you explain to them that the alternative is instant dismissal with no pension, not to mention the potential of time in the "Big House" they tend to get the message pretty quickly.

That basically reduces the issue to one of training and policing YOUR personnel.