About this site

A reference site about data loss prevention and insider risk: programme design, detection engineering, investigation practice, and the legal constraints on monitoring employees.

What it is

Written for the people who have to build and run these programmes. It assumes you have a budget, a deadline and a sceptical audience, and that you would rather know what does not work before spending money.

Everything here is editorial. No vendor sponsors this site, no product is promoted, and no article is written to support a purchase.

What it is not

This site is written from the defender's side. It covers detection, programme design and response. It does not publish material on evading controls or moving data undetected, and it will not.

About the domain

This domain previously belonged to a charitable foundation supporting regional parks. That organisation has no connection to the content published here, and none of its material is available on this site.

If you were looking for the foundation — to donate, to apply for a grant, or to reach its staff — this site cannot help you, and no donation or application submitted here would reach anyone. Please search for the organisation directly.

A note on scope

Employee monitoring is regulated differently in every jurisdiction, and the rules change. Articles here describe common obligations and flag where they typically arise. They are written to help you know what to ask your own counsel. They are not legal advice.