october 1, 2014 - acuia 15 - session 7... · damage your reputation . ... –according to time...

28

Upload: others

Post on 30-May-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

October 1, 2014

Page 2: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Social Media

Page 3: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Agenda

• Introduction

• History

• Purpose

• Evolution

• Impact on Industry

• Preparedness

Page 4: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

What is Social Media?

Page 5: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Social Media Are:

“computer-mediated tools that allow people

to create, share or exchange information,

ideas and pictures/videos in virtual

communities and networks”

Page 6: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites
Page 7: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

It’s a New World

https://www.youtube.com/watch?v=zxpa4dN

Vd3c

Page 8: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites
Page 9: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Benefits of Social Media

• Enables the Credit Union to Communicate With Existing Members

– Blogs, videos, and fan pages

• Helps to Attract and Reach Out to New Members

• Increases Member Loyalty

• Provides Opportunities for Marketing and Promoting New Products and Services

• Promotes Team-Building and Camaraderie

• Vetting Potential Employees

Page 10: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Risks Associated With Social Media

• Data Security Risk

– Clicking on links can take unsuspecting employees to sites that will introduce spyware/malware

• Compliance/Privacy Violation Risk

– Most frequently, the risks arise not from malice but from inadvertently or thoughtlessly leaking sensitive information

• Reputational Risk

– Conventional marketing wisdom long held that a dissatisfied customer tells ten people. But...in the new age of social media, he or she has the tools to tell ten million

– What your employees, partners and competitors say about you can damage your reputation

Page 11: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Risks Associated With Social Media

• Social Engineering Risk

– In 2010, Facebook and Twitter were the social networking sites most affected by security breaches. The sites have become the ideal environment for cybercriminals due to users of these sites placing more trust in them than other sites ,

– In many cases, answers to challenge questions can be acquired from information shared in posts, photos and profiles published on social media sites

– May provide information helpful in guessing user IDs and passwords

• Personal Safety Risks

– Providing too much information about family, work responsibilities, travel plans, etc. can pose hazards to personal safety

Page 12: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Risks Associated With Social Media

• Litigation Risk

– Credit Unions may be held responsible for an employee‘s negative statements about another person or competitor on a website or blog

– Credit Unions may face lawsuits over employee language or activity that is harassing, discriminatory, threatening or derogatory

• Loss of Employee Productivity

– According to Time Management News, employees who access Facebook, Twitter or other social media sites during office hours waste approximately fifteen minutes to two hours every day.

– A survey completed by Nucleus Research revealed that only 13% of the employees that report accessing social media during work hours could identify a business reason for doing so

Page 13: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

TOR .onion is a special-use top level domain suffix designating an

anonymous hidden service reachable via the Tor network. Such

addresses are not actual DNS names, and the .onion TLD is not in the

Internet DNS root, but with the appropriate proxy software installed,

Internet programs such as web browsers can access sites with .onion

addresses by sending the request through the network of Tor servers.

The purpose of using such a system is to make both the information

provider and the person accessing the information more difficult to

trace, whether by one another, by an intermediate network host, or by

an outsider.

Page 14: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

http://socialmediagovernance.co

m/policies/

“Our goal is to provide useful and interesting content about our

company and foster an open and respectful dialogue relating to the

specific issues and topics covered in our posts and tweets and other

multi-media.”

Page 15: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

There’s a big difference in speaking “on

behalf of the Company” and speaking

“about” the Company. This set of 5

principles refers to those personal or

unofficial online activities where you might

refer to Coca‐Cola.

1) Adhere to the Code of Business Conduct and other applicable policies. 2) You are responsible for your actions.

3) Be a “scout” for compliments and criticism.

4) Let the subject matter experts respond to negative posts.

5) Be conscious when mixing your business and personal lives.

Page 16: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

A good social media policy does not

constrain your employees’ personal self-

expression, but makes it obvious for them

where to draw the line. Review some

examples of corporate social media policies,

work with HR or legal as necessary, and

codify something that relieves the stress of

“should I or shouldn’t I” for your staff, while

providing you peace of mind.

Page 17: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

"When you upload, submit, store, send or receive content to or

through our Services, you give Google (and those we work

with) a worldwide license to use, host, store, reproduce,

modify, create derivative works (such as those resulting from

translations, adaptations or other changes we make so that

your content works better with our Services), communicate,

publish, publicly perform, publicly display and distribute such

content."

Page 18: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Even your members can be crooks

Consider strong disclosure language

Monitor your Facebook, Twitter and other Social Media

accounts

Search on-line sources for fraudulent spoofing

CARD CRACKING

Page 19: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Mitigate Social Media Risks

• Consider Who Can Post to Social Websites on Behalf of the Credit Union

– What information should be released to the public?

– Can an executive’s profile or postings leak information of value to competitors who may “mine” contacts or acquire inside information

• Make It a Credit Union Practice to:

– Conduct all work-related social media contacts at work and on

credit union equipment

– Draft all social media messaging in a different media so the

message can be carefully reviewed and so the employee can check

that the right account is being used before transmitting

Page 20: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Mitigate Social Media Risks

• Remain Vigilant About Changing Privacy Settings

– Helps to avoid sharing information with an unintended audience

• Have a Plan for Responding to the Inevitable Disasters and

Accidents

• Set Clear Social Media Standards and Guidelines for

Employees

– Social media standards and guidelines should explicitly state when

other internal policies, standards, and guidelines apply when it

comes to social media use

– Social media standards and guidelines should be clear on the

ramifications of policy violation such as disciplinary or other action

Page 21: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Mitigate Social Media Risks

• Limit Access to Social Media Sites to Only Those Who

Have Legitimate Business Needs

– Should also have formal approval to use such sites

• Permit Employees to Access Non-Business Related Social

Media Sites Only During Lunch Breaks

– Under certain conditions, such as prohibiting the downloading of

materials from social media sites and linking to other sites

• Consider Blocking Social Media Sites

– Encouraging self-policing of social media use is a less offensive way

of dealing with this issue.

Page 22: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Mitigate Social Media Risks

• Provide Proper Supervision

• Use Social Media Monitoring Software Regularly to Detect

Non-Compliance

• Ensure That All Employees Understand the Expectations

Regarding Their Comments About the Credit Union Either

At Work or In Personal Social Media Use Outside of Work

• Establish an Ongoing Awareness and Training Program

Page 23: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Mitigate Social Media Risks

• Actively Manage Credit Union Profiles and Keywords for

Suspicious Activity, Such As:

– Facebook:

• Posts by other fans that direct members to another site

• Messages sent to members requesting account information

• Discussion posts requesting account information

• Posts by users that include personal or account information

Page 24: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Mitigate Social Media Risks

• Actively Manage Credit Union Profiles and Keywords for

Suspicious Activity, Such As:

– Twitter:

• Tweets by other users about the brand with links to suspicious sites.

• Retweets of credit union tweets with suspicious activities.

• Tweet, replies or direct messages by users that include personal or

account information

Page 25: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Mitigate Social Media Risks

• Actively Manage Credit Union Profiles and Keywords for

Suspicious Activity, Such As:

– Community/Forums:

• Posts by users that direct customers to another site.

• Posts requesting account information.

• Posts by users that include personal or account information

Page 26: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Mitigate Social Media Risks

• Modify Security Challenge Questions

– Eliminate or place less emphasis on information that may be readily

available on social media sites.

• Consider a Cyber Liability Policy

– Provide full limits for notification, remediation, forensics and

potential coverage for fines and penalties due to customer financial

data leaked by an employee

Page 27: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Copyright © 2015 Security Compliance Associates. All Rights Reserved

Audit For Compliance

• Check the LinkedIn Profile of Executives

– Do they disclose sensitive information about the credit union?

• Monitor for Compliance With Credit Union Standards

Free Tools

Google Alerts

IceRocket

Social Mention

HootSuite

Seesmic

Tweetdeck

Bit.ly

Fee-based Tools

Radian 6

Scoutlabs

Sysomos

Cyveillance

SocialWare

Brand

Protect

Page 28: October 1, 2014 - ACUIA 15 - Session 7... · damage your reputation . ... –According to Time Management News, employees who access Facebook, Twitter or other social media sites

Questions - Comments