An employee internal legal agreement should not be used as a sole base to secure a company. Robust IT system and good monitoring system as a whole are in the first tier that should be developed, implemented and managed properly.