Comprehensive rules and specifications for Exchange and Outlook are necessary in order to ensure the security of the information they are used to process. For example, data may be lost, changed, or deleted accidentally if Exchange is incorporated into Active Directory in an incorrect and uncontrolled manner. The situation is similar if mailbox databases are depublished in an unregulated manner and Exchange is not sufficiently considered in the security policy. The same holds true when the Outlook clients can access the Exchange servers without any controls.