Corporate protection: email, internet

I am looking for examples of procedures or policy ideas that protect a corporation from employee abuse of corporate email or internet systems

thanks

Rich