Who to blame?

Blame?

1. The security officer for not laying down a more thorough policy.

2. The IT dept for not locking down laptops, to prevent users from installing software.

3. Education and Compliance depts to drum the security and acceptable use policies into users, especially those working on data that may well be taken off company premises.

A compny of Pfizer's size can well afford to buy the best security software out there, to ensure that laptop accounts are lock up tight so only approved apps can be used.

As they say, there's no accouting for the ingenuity of a fool!