Firms attempting to meet regulatory requirements for monitoring employee use of off-channel communications for business purposes face a bedeviling number of obstacles.
How much is enough, in the opinion of regulators? How much is too much, in the eyes of employees? Is using internal policies, controls, and training sufficient, or should a firm consider hiring a vendor to help?
