Infosecurity Europe 2007: Only tenth of companies have encryption policy