Consider that monitoring employees' web access, and restricting access to risky sites, is a best practice for most organizations. How far should monitoring go? For instance, consider the situations in which an employee is looking at job sites to look for a new job, or looking at weapons and terrorist sites, or researching cancer treatments. Does permitting access to risky sites pose a risk to the organization