"At the very minimum..."
Really, you agree that application whitelisting should be a "minimum" even in a corporate environment? I've been a BOFH for quite a while and I don't know a single company that's managed to put that in place successfully. Since you're all for it, I assume you have it all wrapped up. Let me get my coat, I want to come see your setup.