I think the reason why employees don't realize the dangers is because the events which are less sensitive to the management of the company's employees are not important in regulating confidentiality of data and information systems. As we can see from the case there are several examples of the proposed event where there's less rigorous regulation in the supervision of information systems within the company. Most of the issues described in the case are simple little issues such as emailing customer credit card numbers and such but I would have definitely have seen these issues but the lapse of these company have cost them security wise.

The best way for organizations to strike the right balance between monitoring and invading their employees' privacy would be to evaluate each employees based on their activities. Have each employee make a report of their activities while the company is monitoring them as well the companies should put trust in their employees to report everything they're doing and when it is time to evaluate them cross compare what has been monitored and what the employees have reported. The consequence biased to one side would be if the company were to engage in just invading employee privacy there could be massive repercussions such as the company being sued etc.

The other components are people security, establishing ethical behavior in the company, and managers taking the initiative to stop any leakage in the company. The human factor in is the stronger point in this situation its not the technology that's leaking information but the people the technology is just a tool to do so. The same goes for when it comes to monitoring and making sure that information is not leaked from the its the people who have to monitor to make sure that anything...