Yes, this is very true. The first best thing that a business can do to increase their security is not use Microsoft Outlook for their mail program.The next in the list of best practices is to get your mission-critical systems either off of Microsoft Windows, or off the Internet.