Businesses have no choice but to engage online with users from external organisations and mobile workers; that is the way the world now operates. Transacting safely and ensuring compliance rely on a high level of confidence in the data security measures that are in place. These include informed users, advanced technology and the ability to co-ordinate both security policy and incident response. This research report demonstrates the cumulative benefits of these measures. It should be of interest to IT security professionals and others impacted by the risk of data losses; ultimately, that is the directors and board members of any organisation.