Connectivism Connectivism / Items

Social networking risk: Managing the inevitable | IT Security | TechRepublic.com

Get Feed
Social networking risk: Managing the inevitable | IT Security | TechRepublic.com
Description

Findings show that over 50 percent of users within the 12-17 age group regularly use social networking sites. This is no surprise, and the number has probably grown since 2006. The security risk to businesses, however, is the ‘why’. Why do young employees use social networking sites?

According to the survey, about 50 percent of those responding use Web-based social networking to make new friends, as shown in Figure 2. Keeping in touch with old friends at the office is a low risk activity, even if it results in employers getting less output than expected. The problem lies in the tendency for experienced social networkers to continue to initiate new friendships, friendships with people they’ve never actually met.

Trying to adequately control new employee use of public social networking by simply telling them to stop is futile, although use of these sites should be addressed in the company’s acceptable use policy. And employee behavior can be modified somewhat by awareness training, but behavior is what it is. Some employees will continue to act in either careless or malicious ways, especially if motivated to do so. However, there are still things you can do, in addition to basic security controls, to mitigate risk, including:

1. Block use of public social networking sites from the office is my strongest recommendation. This will help protect your data or social engineered information, about your company or network, from finding its way directly from the employee’s desk or your network, to either a social networking site or a friend met at such a site.
2. Implement DLP (data leakage prevention). Know where and how your data is moving. If an online ‘friend’ of one of your employees happens to gain access because of sharing activities, you will be able to block data loss or at least know it’s happening.

Original URL

Comments

Report This
Forgot your password?