Asking employees to follow best security practices is rather like having a travel-sick dog – you can hope for best behaviour, but sometimes all you can do is clean up the mess ...