Cybersecurity Communication, Employee Monitoring and Industrial Relations: Balancing Organisational Security with Worker Privacy

Abstract

endpoint detection, access logs, email filtering, behavioural analytics and artificial intelligence-assisted anomaly detection. These tools support the detection of insider threats, credential misuse, data leakage and operational disruption, but they also extend managerial visibility over employees and may shift employment relations from trust-based cooperation towards datafied supervision. This article develops a critical conceptual account of that tension. It argues that cybersecurity monitoring may be justified when organisations protect systems, customers and public interests, but legitimacy depends on communicative, procedural and participatory safeguards. Drawing on Communication Privacy Management Theory, Procedural Justice Theory, Socio-Technical Systems Theory and Industrial Relations Theory, the paper refines the Security-Privacy-Voice Balance Model. The model proposes that monitoring intensity and algorithmic opacity increase privacy concern when organisations do not define purpose, scope, retention, decision use and accountability. Cybersecurity communication quality shapes perceived legitimacy, organisational trust mediates acceptance, and worker voice moderates monitoring-related industrial-relations conflict. The paper treats monitoring as relational governance instead of a purely technical control and shows how cybersecurity data practices reshape power, consent, trust and workplace voice.