The best choice is all of the above. When handling sensitive information be cautious. Even when sending internal emails with sensitive information, encryption should be used. This would include financial data and anything considered personally identifiable information (name in conjucntion with social,address, phone number, and date of birth).