Monitoring software blues
Someone recently asked me about my thoughts on monitoring software (Blue Coat, Vontu, whatever) as it regards to protecting against disclosure of sensitive company data by social networking/Web 2.0/etc. I’m not going to get into individual situations and their legality, because privacy laws and cultural values differ. I think you’ll start seeing a lot more interest in these monitoring solutions because of the proliferation of PCI, HIPPA, and all those other fun standards that us infosec guys are begrudgingly thanking for job security. This was part of my response, and I wanted to record it for posterity.