0:00

[Music]

0:01

1 second

Sharon: it's highly embarrassing um to be monitored when you're going to look at porn 

Lauren: sounds like you have experience with this 

0:10

10 seconds

Sharon: I do not have

0:22

22 seconds

experience 

Ross: getting like loosened up are we

Sharon:  we loosen yeah okay feeling good all right. so guys here's the situation we

0:30

30 seconds

have a client we work closely with the security team they're actually wonderful

0:36

36 seconds

and it came out that they're looking at who's going on various websites that

0:45

45 seconds

they should not be going on and the topic of porn came up

0:56

56 seconds

Lauren: How did it come up did it come up when they like actively monitoring 

Sharon: their security

1:02

1 minute, 2 seconds

lead was actively looking at who is going on prohibited websites 

Ross: it's not

1:10

1 minute, 10 seconds

unheard of though because you know part of the protections is actually looking at repeat offenders and

1:19

1 minute, 19 seconds

things like that so you've got to have some sort of discipline there I guess 

Lauren:  but is it necessary to sit there and watch what everyone's doing like we no

1:27

1 minute, 27 seconds

Ross: Well that's a fair point that's probably not what you should be doing 

Sharon: well I mean okay so the issue that I had

1:33

1 minute, 33 seconds

with it was that he knew exactly which employee was going on what site um and

1:43

1 minute, 43 seconds

my concern was that these employees have no idea that they're being monitored and

1:50

1 minute, 50 seconds

it's highly embarrassing um to be monitored when you're going to look at porn

1:57

1 minute, 57 seconds

Lauren: sounds like you have  experience with this shit

Sharon: I do not have 

2:04

2 minutes, 4 seconds

experience.

okay so as a uh security professional within a company are you

2:11

2 minutes, 11 seconds

allowed to look at which websites your employees are going on or at least

2:19

2 minutes, 19 seconds

trying to go on 

Ross: providing that there is you know correct notice and that it's perhaps in your employment contract that

2:27

2 minutes, 27 seconds

you've got security aspects of it like that. In all honesty I think if you're employed by a company in a lot of ways you know you shouldn't expect that

2:35

2 minutes, 35 seconds

degree of privacy on a company-owned piece of equipment. I think personal equipment just gets a whole lot hazier but company owned equipment you know I I

2:44

2 minutes, 44 seconds

wouldn't be wanting to go on porn and things that I shouldn't be going on to on company owned equipment, and I think I should expect that someone would monitor

2:51

2 minutes, 51 seconds

it but that's maybe me coming from the security background. I I think it's it's fair providing those notice

Lauren:  there has to be noticed

Sharon:  right so like what kind of

2:59

2 minutes, 59 seconds

notice cuz what is sufficient notice 

Lauren: are they in Ontario cuz then they if it's above 25 employees they need a policy

3:07

3 minutes, 7 seconds

employee employe monitoring policy

Ross:  I think you know as much as there's notice in email I don't think that's necessarily effective because of exactly

3:15

3 minutes, 15 seconds

what you're saying. But if it's in even in your employment contract that like okay here's the deal as to what happens

3:22

3 minutes, 22 seconds

as as part of your employment here maybe that's our first point of notice um but yeah speaking to Lauren's point employee

3:30

3 minutes, 30 seconds

notice policies that actually detail this

Sharon:  but I mean if those websites are already blocked you cannot actually go on.

3:38

3 minutes, 38 seconds

You can attempt to but you can't then do you still need to Monitor and attempt to go on something that you can't

3:46

3 minutes, 46 seconds

actually even browse or go on 

Lauren: so hang on he was monitoring just people are attempting

Sharon: yes

3:54

3 minutes, 54 seconds

Lauren: I'm to someone they may do something wrong

Ross:  no it's not that it's not that they may do something wrong like they

4:01

4 minutes, 1 second

are actively trying to get to a a blocked site but like you know once or twice is an accident um more than that

4:10

4 minutes, 10 seconds

is deliberate and when you're starting to deliberately do this or you start looking at trends of someone going to multiple sites that they shouldn't be going to that then I think is a security

4:20

4 minutes, 20 seconds

thing that the company should look at

Lauren:  but would that person still be attempting if they knew they were being monitored? I think that's also the we

4:28

4 minutes, 28 seconds

can't just decide things on based on what's wrong or what we feel is like morally incorrect we've got to break it

4:36

4 minutes, 36 seconds

down into what's allowed in privacy legislation and otherwise. 

Ross: like I think there's ways and means of doing it cuz I

4:43

4 minutes, 43 seconds

mean it's also it's what would be very subversive is if you were monitoring and still allowing people to get to the 

4:50

4 minutes, 50 seconds

Lauren: sites like um like entrapment

Ross:  yeah whereas like this at least would show a screen saying you know you're not going

5:00

5 minutes

To the site surprise you please see

5:06

5 minutes, 6 seconds

HR I personally think that on a reactive side like if someone is frequently doing this then it should be I don't think it should be actively monitoring, like Hmmmm

5:15

5 minutes, 15 seconds

where is Jimmy going today um I think it would be you know okay well this user has reached a threshold of 16 blocked

5:23

5 minutes, 23 seconds

sites in the last 24 hours what do you want to do

Lauren:  if only you could have a policy that said to employees don't be Dumb we won't be

5:31

5 minutes, 31 seconds

creepy 

Ross: I love that I think we should title our policy that 

Sharon: very creative 

Ross: don't be dumb we won't be creepy I like it

5:39

5 minutes, 39 seconds

Sharon: Speed Bump

Lauren:  whoa   these are the guard rails just stay within them don't do anything that you wouldn't want your mom knowing

5:47

5 minutes, 47 seconds

that you're doing 

Sharon: all right I think that solves the problem 

so if uh if you're an employee

5:55

5 minutes, 55 seconds

going on some porn sites on company devices don't be an idiot just don't do

6:03

6 minutes, 3 seconds

it if you 

Lauren: that's a professional 

Sharon: great Consulting 

Ross: use a

6:12

6 minutes, 12 seconds

VPN 

Sharon: and then if you are the employer monitoring your employees just give

6:19

6 minutes, 19 seconds

notice man right yeah 

Ross:  set the expectations yeah

6:29

6 minutes, 29 seconds

Sharon: Ross are you monitoring us 

Ross: not yet 

Sharon: um okay