I used to work at a very large, publicly held company. When I got my new laptop, I realized the PGP whole disc encryption was blocking one of my video cards so I could only run one monitor with my laptop.

After asking around, I soon realized exactly none of the engineers had PGP installed on their PC's. I was pretty surprised when I was told they simply asked for a clean install with nothing on their laptops and the IT people gave them what they wanted - a completely unsecured laptop with which they could customize to their own specifications.

As shocking as it seemed, I was told by several of the team members that the IT support staff allowed it because they "trusted" the software engineers not to install sketchy stuff and thought they could keep their stuff more secure than say a PM.

I think back now and wonder why they would take such a huge security risk.