Nobody Meant to Build a Surveillance Machine: The Modern Corporate Panopticon

Steven Irurueta

Modern workplace surveillance wasn’t intentionally designed: it emerged. Every department inside an organization asks for something reasonable: stronger security, legal compliance, easier collaboration, simpler administration, or AI-powered productivity. Individually, these requests make sense. Together, they create one of the most observable work environments ever built. Using Microsoft 365 as a case study, this presentation explores how those ordinary organizational decisions gradually produce extraordinary visibility into employee behavior, why these environments are so frequently misconfigured, and how understanding the architecture behind them often reveals more than any single vulnerability ever could. Rather than focusing on sensational exploits, the talk examines assumptions, metadata, and the quiet ways information accumulates inside modern enterprises – because in complex systems, understanding is often the most powerful tool.

Sunday 1300 Crystal Ballroom


Steven Irurueta is a systems engineer specializing in enterprise identity, Microsoft 365, cloud collaboration, and AI governance. Over the past decade, he has designed and operated large-scale digital workplace environments for organizations across multiple industries while remaining active in the hacker community through 2600 and its meetups. He enjoys exploring the intersection of technology, privacy, organizational behavior, and the unintended consequences of complex systems.