The web and email are not IT’s friends. They create risk and increase the workload because they distribute and prolong the payoff of known and unknown threats in zero-day vulnerabilities, client-side vulnerabilities, and Web 2.0 exploits. Layering new and traditional techniques, including anti-malware, anti-spam, intrusion prevention, and application whitelisting, throughout the network and systems will minimize those risks.