System administrators from the IS department will probably know best which technologies to select that improve security and efficiency. Once a policy is created, companies need to make people aware of it. Publish the policy online, deliver it via e-mail and print it in the employee handbook. All too often, companies just look at the Internet as a liability or productivity issue without examining its empowerment aspects. Many employers keep tabs on e-mail and Internet use with monitoring or auditing software.
Employers can even search through employees' desk drawers.
Yet, just because companies can monitor their employees doesn't mean they should. The best Internet policy will balance the privacy concerns of individuals with the interests of the company. Monitoring the Web can be an effective means of knowing where employees are surfing as well as which sites are most useful. But doing so without issuing a written notice or label upfront will probably anger employees, harming company morale and productivity. Any privacy law in the future is likely to contain a component requiring some form of notice, so it's a good idea for employers to include such an aspect now.