Here are some recent bits I wrote for SearchWinIT.com and SearchExchange.com to help you flesh out the security of your email environment:
The state of email content filtering – and what you can do
Solidify your Exchange email server incident response plan