Why the hell do organizations keep putting this kind of sensitive data on a laptop?

Even if your process requires someone remote from the office to work with the data in desktop tools like Excel, etc., it seems like it'd be good sense to require them to do it over a Terminal Services or Citrix connection to a secured server.