Do you know who is accessing your files? Is your network security that of security through obscurity? Does your business have an actual security policy and documented procedures, filewall rules and active policy?
Does your businees have an active IT policy, that is it readable and understood by employees? Do they know what is acceptable and allowed behavior on the network and in the office environment? Do you have usernames and passwords for all appliances like routers and switches documented.
On and Off Site
Are there materials that leave and come back onsite? Do emplyees have laptops that they bring from home? Does the company provide laptops? Does the company allow iPods and other devices to be attached to workstations .