For Sean Lang, chief information security officer for the Library of Congress, email security is both an internal and external matter.