The National Insurance Brokerage

You are the manager responsible for the security of the computer system at The National Insurance Brokerage, has recently been reading local trade journals about the problems associated with computer systems, and the loss and unauthorized use of computer data. You have been charged with developing a security plan for the organization. At this point there are no limitations and you have noticed is that employees are employing the Web and e-mail for personal use. What concerns should you have about the uses of the system and what steps and requirements should he take with management and staff members to secure the data of The National Brokerage and to meet any legal requirements?