The example above of quashing remote backups is just one idea; naturally, if you don't have the bandwidth for remote backups, you should insist up the chain that servers be backed up to tape or optical drives and transported to offsite storage facilities. But there are other bandwidth bandits to track down. See whator whois hogging the pipe, and follow up when you find massive, unauthorized entertainment downloads, or even legitimate transfers that sit like a fat mouse in a snake's throat, occur regularly, and could be scheduled for off-peak hours.