>There are still companies who don't treat their employees like idiots and actually trust them. Yeah sure, but wow many of those are large non-tech companies?

>There are still companies who don't treat their employees like idiots and actually trust them. Yeah sure, but wow many of those are large non-tech companies? You massively overestimate the tech competency of the average PC user if you think it's normal in most companies to not have security monitoring solutions in place or over the internat activity. In our latest phishing test IT did, several users fell for the trap, despite it being a tech company. There's always gonna be someone careless one day and companies want insurance policies against that. Having such solutions in place doesn't mean the company doesn't trust you, it's more like that old Russian proverb, "trust but verify", and for ticking security compliance boxing as an insurance policy. Everyone makes mistakes, it's only human. So more like, speak for yourself, if you think your internet activity at work isn't logged anywhere.