From some organizations I know....

At one place I dealt with, you turned in your laptops HD every day. If you had to take work home you got a special work away HD. All important files were on the server only, and the server was in a very secure location. The laptops were still encrypted, just because they could, and I guess in case someone wanted to comb the cache for cookies and other info. If you took work home it had to be loaded onto a secure portable device.

And this wasn't a spy agency....