"We're not naive enough to believe policy alone is the answer, and we don't need technology behind us to help enforce these policies," he said. "We want our employees to do the right things and hope they do the right things, but we know there may be times that they don't have the tools."
Malcom hopes to push employees toward using corporately owned Sharepoint for content sharing, but he also realizes it's not the most user-friendly utility to use on an iPad.
"So something like Dropbox that's totally easy and consumer friendly, they're going to gravitate toward that," he said. "If we can find someone like a Box.net that we can enter into an enterprise agreement with and help reduce some liability and get some contractual terms in place, that's what we'd like to offer to our user community."
Malcom believes the time for single-word passwords is over. He's hoping to create a policy where employees will use pass phrases, sentences that are easy to remember, so that his company will not have to require password updates as often.
"So instead of changing it every 90 days, maybe we move to six months or every year," he said. "Ultimately, I'd like to get to biometrics or RFID proximity cards where you just have a four-digit pin along with your card or your fingerprint in order to get onto our systems."
Lucas Mearian covers storage, disaster recovery and business continuity, financial services infrastructure and health care IT for Computerworld. Follow Lucas on Twitter at @lucasmearian or subscribe to Lucas's RSS feed. His email address is firstname.lastname@example.org.
Read more about cloud computing in Computerworld's Cloud Computing Topic Center.