We have been speaking to many companies that run the full spectrum in size and scope, from Fortune 50 companies to SME companies with 20 employees.

It is interesting that in many instances the Legal Department or Legal advisers to these organizations like to hedge the entire archiving discussion around PIN/SMS by taking the position: "If we don't archive the data, we won't have to produce it if we are caught up in a legal action." To be more succinct: "We can't give opposing counsel something we never had."

A senior aide to British Prime Minister Gordon Brown had his BlackBerry stolen by Chinese intelligence agents while on a trip to China back in January 2008. According to another unmentioned senior Brit official, the incident had “all the hallmarks of a suspected honeytrap by Chinese intelligence.”

Former White House Deputy Chief of Staff Karl Rove had lost his BlackBerry device more than once.

The knee-jerk reaction: remotely wipe the devices regularly or at least if they go M.I.A.

Kimberly Hefling, an Associated Press Writer wrote the following:
“A Pennsylvania-based lobbyist was charged Tuesday (July 15th, 2008) with destroying evidence related to an FBI investigation into former Rep. Curt Weldon. Prosecutors said in court filings that Cecilia Grimes threw documents in the trash after she received grand jury subpoenas for those documents. FBI agents found the documents in her garbage cans. Authorities said she also threw out her Blackberry at a fast-food restaurant to keep the FBI from retrieving her e-mail. “

Many organizations believe the development of policies and processes, placing them in an attractive binder, and handing the binder to auditors and the board of directors is reasonable and appropriate security. Employee awareness of the policies and processes and the business objectives they represent is lacking, as is the existence of a consistently applied set of sanctions for non-compliance. Human nature drives employees to practice old habits until a reason to change presents itself. Management must provide that reason to change.