According to Gorman, it is "not possible to implement technical controls preventing the use of personal email accounts for government business."<

Why the heck would anyone be sending sensitive information from a personal account? I guess vendors sending docs to .mil addresses? I think we need more details. Humans are going to human, no technological answer can stop a human typo-ing a tld. Reminds me of this cartoon