So there's Lesson Number Two: when you're coming "clean" about a data breach (or potential breach)get the numbers right right away.
But it's Lesson Number One that has the most relevance for small and midsize businesses: information on the move can be moved out of your control in an instant.
According to a government review, MoD displayed little awareness of even basic security procedures, with its staff unaware of the dangers of losing information.
This is as good a time as any -- every Monday is, in fact -- to undertake a thorough review of your own:
How many mobile devices containing sensitive information does your company have in the field?
How many employees are using their own mobile devices for business?
How recently have all employees been drilled in the absolute basics of mobile data security?
Might not want to wait too long to do that review, at least if the British government's lessons are any indication.
MoD admitted over the weekend that yet another military laptop had been stolen, this one as an MoD official checked out of a hotel.
You gotta hope that whatever the purpose of the trip it didn't produce any new sensitive info on the machine that's now in the crooks' hands.