Tuesday, December 1, 2009

Quandry of Social Media Security

Social Media Landscape

Well...I hope you didn't have actual work to do...

I was recently asked a question regarding the top IT concerns for social media (Web 2.0) implementation plan.  Well, in my view information security is at the top. Companies must consider that previously private data may be released onto the Internet. Also, applications like Facebook are rife with malware and phishers attempting social engineering.

Training people not to post sensitive data about themselves (birth dates, full addresses, corporate email, etc.) is crucial. If the company wants to have a social media presence, then the people involved in the plan will need to have the training to understand what to post, what is acceptable use (no Facebook apps) and what not to post.  The Internet is full of regrettable stories of CEO’s and high-ranking employees “saying” really stupid things that bite them on the backside almost immediately.

User requirements gathering will be paramount. What exactly does the corporation want to achieve with social media? This will drive what applications are to be used or developed for the purpose. Of course once a company heads down the software development path you add a huge layer of complexity to the equation. Using off the shelf applications (COTS) is usually the most cost effective.

Finally, standardization is key. If IT is going to support social media applications, the company must decide on what tools it will use and make that the standard. If users are allowed to use non-supported applications, it will only lead to IT and user dissatisfaction/conflict and a needless increase in risk.

Now for some links to backup my pontification:

  • Generic Social Media Planning Steps
  • Another Generic Social Media Plan Post
  • Blog Post on Social Media IT/Business Concerns
  • Cisco Security Blog Post on Socia Media Pros & Cons
  • Federal Guidelines on Social Media Security

Finally, when it comes down to it, a wiki may be a better alternative for an “in-house” social platform.  I’ve used Atlassian Confluence with some clients and it’s pretty decent with only a modicum of quirkiness.   Plus you can impress your colleagues with the cool product name if nothing else.

[Via http://mikemeikle.wordpress.com]

No comments:

Post a Comment