What You Can Monitor, Technically
The mechanisms available, in order of intrusiveness, so the choice is deliberate rather than whatever the product does.
Monitoring
What to monitor
A URL is a destination. A prompt is a draft, and people write things in them they would never send.
7 notes
Prompt Content: the Line You Should Think About
Reading what somebody typed is different in kind from logging where they went. Why, and what follows from it.
Aggregate Versus Individual Visibility
The same data at two resolutions supports two different activities. Choosing the resolution is the main governance decision.
Detection Without Interception
Most of what a programme needs can be learned without reading anything. The techniques, and why they are usually enough.
False Positives and What They Cost
Detection in this area generates a lot of noise. What that costs, who pays it, and how to keep the rate survivable.
Telling People What Is Monitored
What to say, when, and in what detail. The communication determines whether monitoring produces information or evasion.
Retention of Monitoring Data
How long to keep what the monitoring produces, which for this category should be shorter than instinct suggests.