Preventing the documents from being stolen is a good idea. I think all organizations should have some checkpoints/processes in place to ensure this. But there are numerous ways ranging from hardware access checks to O/S level security. How to evaluate what is good and usable and what is not?