Informing employees that monitoring will be done is a bad idea.

• A. TRUE
• B. FALSE
• C. Depends on the context
• D. Not enough information

Answer: (B)

Transparency about monitoring is essential for a security program. Informing employees that monitoring will occur sets clear expectations about what will be collected, how it will be used, who can access the data, and how long it’s retained. This openness helps build trust, encourages responsible use of systems, and reduces the risk of disputes or accusations of covert surveillance. In many places, disclosure or policy-based consent is also a legal or regulatory requirement, reinforcing why upfront communication is best practice. There can be rare investigative scenarios where disclosure is managed carefully, but the general approach is to inform and document monitoring in the organization’s policies and training. So saying informing employees about monitoring is a bad idea goes against these principles.