How would you set the default umask value for normal users if you are working in a typical business company as a system administrator? and Why?

Tell me what you think!

1. You set the umask using umask command.
2. If you want to set "default" umask you add appropriate command (e.g. umask 002) in some initialization script. E.g. .profile or .bashrc etc.
3. Why? Well, in some companies they have VERY strict access controls, they don't want anyone to be able to read anything more than what they need. So you set your umask in such a way that you give bare minimum permissions by default. Also this way if some hacker has successfully cracked the password of one user, he'll still not be able to see other users' data.