Most organisations lack adequate protection against spam and data leakage.