Auditing, surveillance and logging are typical and common place in the workplace, understandably so. These actions are crucial to establishing metrics and performance of the network and its resources.
The surveillance can take many forms, namely:
- Company Cell phone passive audio recordings in and out of the workplace
- Key loggers
- Traffic including SSH traffic that was MITM'd (banking stuff, private emails)
- Instant messages and texts.
The CIA triad's first element is confidentiality, and in the context of IT infrastructure this relates to confidentiality of the corporation's communications and data. This leads to an uneven dichotomy where individual's rights to privacy are compromised in this effort to secure IT infrastructure.
Since laws are the threshold between what is right and wrong in the context of a country's laws, why are there no disciplines in certifications (ISC2 CISSP, SSCP, etc) that propose balancing out the right of the individual and the requirements of the corporation?
Edit: try to ask the question in a better way