Security research firm Sophos just released a new Security Threat Report with “grim irony:” more companies now allow their employees unfettered access to social networks, while spam and malware attacks rose dramatically over 2009. The Ars Technica article detailing the report, ”Firms worry about social networks, but don’t block access,” says that most companies express concern over these attacks, which means educating employees and applying “social security” methods are crucial. The growth in malware attacks was prompted in part by the ease with which users click links and download unknown files “with abandon,” and this is exactly the reason why companies need to have strong and secure social media usage policies in place. Facebook has taken some steps, partnering with McAfee to counter threats both on site and on users’ computers. At the end of the day, it comes down to the individual user, navigating through the precarious social universe with one finger ready to hit ESC.

Sam Hartman, Feb. 18, 2010

Note: Post not sponsored.

Instead of avoiding social media and missing out on its potential for business leads, networking connections, and customer engagement–for fear of the data security issues–organizations need to establish a strong security strategy that includes employee training. Read the moral of the story here.  

While acknowledging the potential for phishing and other cyber attacks in social media settings, they also point out that despite the continual threats to online banking, it is not only still being used but that use is growing. The key seems to be a comprehensive security strategy that includes employee training not as an afterthought, but as a key component of the plan. By acknowledging the human factor being the weakest link in any information security situation, proper planning allows them to fully utilize and benefit from great social media networking.

Melody K. Smith, Feb. 19, 2010

Note:   Post not sponsored.

Project Honey Pot was created with one goal in mind: to stop spammers. Its software is necessary today, as more and more professionals turn to the web for the majority of their communication, opening the door to spam, malware attacks, and viruses. At the core is education: educating employees about the links they click on, the “friends” they might add, and granting to access to people and applications they trust. “Don’t Click That! Social Networks a Hacker’s Delight” points out the huge growth companies can experience through social media usage – growth that shouldn’t be stifled by security concerns. Spreading the world through social media can be great for sales, and many consumers now look to Facebook Pages or Twitter posts for brand updates (the DellOutlet Twitter account secured more than $2 million in sales in 2009). In short, be smart and skeptical when traversing the social stratosphere.

Wrap-up: While not highlighted in the article, MySpace, with its customizable HTML layouts, make it particularly vulnerable to malware and phishing links.

Sam Hartman, Feb. 17, 2010

Note: Post not sponsored.

If you are having a difficult time deciding what is and is not appropriate for workplace social media, you are not alone, says an investmentnews.com article. While many companies realize the bountiful business and PR opportunities sites like Facebook, Twitter and LinkedIn offer, it is difficult to know where to set employee limits. The article details how the financial advising world is thoughtfully tackling this difficult question, and while no two businesses are the same, the lessons from this piece are applicable in practically all realms. Since social media happens in real-time and cannot be pre-approved, the financial advisory board is expected to recommend guidelines encouraging common sense, flexibility and a professional voice with all social media communications. Clearly, the way businesses communicate is changing and the best plan is to layout a sensible set of ground rules to keep the face of your business blemish-free. 

Patrick Roland, Feb. 12, 2010

Note:   Post was not sponsored.