You'd think by now when they are accessing sensitive data they'd take the computer off the network when they do so, even if it is an awesome Cisco network.
An off-site server backup with redundancy to removable storgage devices that are held disconnected in protective storage would be useful too.