Hi CharleyO,
It is presented in a slightly different way, but it is the old discussion topic again. Is a compromised system a lost system?
Do we have to restore it from scrap or can it be cleansed.
It just depends how long the situation was there, and what caused it. Without a good audit and user policy a system cannot be trusted, plain and simple.
Using a normal brain will do the job most of the time. That is my view. But you can train people to do the right routines, for instance clean all unwanted e-mails out every Monday morning.
Security routines must be as simple as brushing your teeth or combing your hair. Update-patch-scan-clean; update-patch-scan and clean, like learning to swim.
polonus