Internal Security

Hello all:

I have a client who is quite concerned about security from internal employees. He wants to make sure that employees are not sending proprietary information to friends, or competitors. What’s the best way to guard against this?? Are there any tools that track and alert to abnormal usage inside the network?? He also would like to guard against inappropriate web surfing as a secondary issue.

Thanks for your input/advise,
Jon