Monitoring the Powerful and the Powerless

Surveillance intensity in most organisations is inversely related to seniority, and the usual explanations do not survive examination.

The asymmetry · Analysis

In most organisations, the people with the least power are monitored the most closely and the people with the most power are monitored least. The pattern is consistent enough to need explaining.

The imbalance described in “Monitoring the Powerful and the Powerless” makes implementation choices especially consequential. An organisation considering the product website in relation to key person dependency should explain what managers can see, consult the people affected and avoid treating apparent agreement as proof that the monitoring is freely accepted.

For an independent benchmark relevant to “Monitoring the Powerful and the Powerless”, consult the CrowdStrike insider-threat guide. Use it to test necessity, scope, safeguards and review rather than to replace a documented assessment of the particular workforce and jurisdiction.

The usual explanations

The work is more measurable. True for repetitive tasks and it explains activity measurement, not the whole gap.

The risk is different. Offered as justification for watching junior staff, and it points the wrong way: a senior person with broad access can cause far more damage than somebody on a picking line.

Senior roles have other controls — approval limits, audit, board oversight. Partly true, and these are controls on decisions rather than on conduct.

None of the three accounts for the full pattern, and the residual is uncomfortable: the arrangement reflects who can object.

In practiceCompare what is monitored for a warehouse operative and for a finance director. The second has access to more that matters and is watched less.

Why it matters beyond fairness

It is visible. Everybody in an organisation knows who is watched and who is not, and an arrangement that exempts its designers is understood exactly as that.

It undermines the stated purpose. If the reason is data protection, the exemption of the people with the most data access is incoherent.

And it makes every other justification suspect. A workforce that sees the pattern reads the official reasons as cover, including the reasons that are true.

The counterIt is argued that senior roles are less amenable to measurement, which is true, and that they are subject to other controls, which is partly true. Neither explains the gap in its full size.

What a coherent arrangement looks like

Monitoring that follows the risk rather than the grade.

Which in most organisations means less at the bottom and more at the top: access logging for privileged accounts, review of high-value approvals, attention to the roles that could actually cause serious harm.

That is a different arrangement from the common one and it is the one the stated purposes imply.

CautionAn arrangement that visibly exempts the people who designed it is the fastest way to lose the workforce's acceptance of all of it.

The test worth applying

Take the measure being proposed and ask whether it would be applied to the executive team.

If the answer is obviously no, the reason is worth examining. Sometimes it is legitimate — the work genuinely differs. Frequently it is that nobody would accept it, which is information about the measure rather than about the executives.

In practiceOrganisations that try this report the main obstacle is not disagreement but that nobody owns the question, so it is nobody's to raise.

What the exemption communicates

Everybody in an organisation knows who is watched and who is not. An arrangement that exempts the people who approved it is understood as exactly that, and it makes every stated justification suspect, including the true ones.

The counterA reasonable objection is that this asks employers to do unfunded work. The reply is that the work is a page and the alternative is doing it later under challenge.

The coherent version

Monitoring that follows risk rather than grade, which in most organisations means less at the bottom and more at the top. That is what the stated purposes imply and it is almost never what is built.

Would this measure be applied to the executive team? If obviously not, sometimes the work genuinely differs and frequently nobody would accept it — which is information about the measure.

JurisdictionLocal rules differ on every point in this note. The shapes described recur; the specifics always require checking.

Following risk rather than grade

Monitoring that follows risk rather than grade: access logging for privileged accounts, review of high-value approvals, attention to the roles that could cause serious harm. That is what the stated purposes imply.

What the pattern tells the workforce

That the arrangement reflects who can object. Once that is visible, every official justification reads as cover — including the ones that are true.

A monitoring arrangement that the people who approved it would not accept for themselves has told you what it is for.

Also in this section