One really important thing that we started doing too was to securely wipe hard drives before a computer is retired or reused within the organization. I have read horror stories about hard drives winding up on the secondary market while still containing confidential information. It only takes a little time to wipe them or destroy them.