Can curbing employee website access ensure better enterprise security?