Study Suggests Social-Media in the Workplace Puts Companies at Risk

According to a recent study by the ISACA (formerly known as the Information Systems Audit and Control Association); a global organization focusing on the security of information systems, employees who dabble in social networking on and off the job could expose their companies to a variety of risks. The top five social-media risks according to the study are: malware, brand hijacking, lack of content control, noncompliance with rules over recordkeeping, and unrealistic expectations of Internet performance. The ISACA found that since access to sites like Facebook and Twitter doesn't require any special hardware or software, employees can easily bypass the security guidelines and safeguards set up by the IT, human resources, and legal departments. The ease of use and the lack of employee awareness make companies vulnerable to various threats.

The study found that using personal accounts to convey work-related information can hurt a company's reputation, while spending too much time with social networks on the job can create a lack of productivity. Although some companies may jump to restrict access to social networks, the ISACA suggest they serve a valuable marketing function.
"Historically, organizations tried to control risk by denying access to cyberspace, but that won't work with social media," Robert Stroud, international vice president of ISACA, said in a statement. "Companies should embrace it, not block it. But they also need to empower their employees with knowledge to implement sound social media governance."

The ISACA suggests that companies develop policies and set up training sessions to educate their workers about the use of social media. Such policies and sessions should cover the personal use of social networks on the job, the personal use outside the workplace, and overall business use.

Social media in the workplace will be discussed at the upcoming WON Meeting in New York City, hosted by PricewaterhouseCoopers. Members can register at https://www.orcnetworks.com/node/3225. To request an invitation email bonnie.arrix@orcww.com

For the full report go to Social Media: Business Benefits With Security, Governance and Assurance Perspectives" (PDF). “Study: Social-media use puts companies at risk” 6/8/10; http://news.cnet.com/8301-1023_3-20007071-93.html