SOCIAL MEDIA SAFETY-BEST PRACTICES FOR SMALL BUSINESS
EXPLORING SOCIAL ENGINEERING
by: Tori Jarema
With social media’s popularity, it’s hard to find a company that hasn’t jumped on the bandwagon. Whether it’s Facebook, Instagram, LinkedIn, or Twitter, or what I will refer to as the “Big Four”, companies are using social media to advertise their products and build customer loyalty more than ever. Social media allows companies to have greater worldwide outreach, the ability to connect with those who share common interests, and allow the information to be shared in real time. Constant customer interaction is helping businesses understand their markets as well as enhance their brand image and popularity, so what’s not to love!?
UNDERSTANDING SOCIAL ENGINEERING
Queue cyberbullying, cyber scams and social engineering by our adversaries. While cyberbullying and cyber scams are important topics, I want to elaborate on social engineering. Social engineering is the psychological manipulation of people into performing actions or divulging confidential information they otherwise wouldn’t do.
As a small business, it’s important to think about what social engineering could do to your company. Social Engineering is one of the easiest ways that makes unknowing conspirators out of innocent employees. This is happening because we’ve become so comfortable with openly sharing what used to be reserved for private, face-to-face conversations. People don’t realize how much personal information is available online, and it’s the smallest bits of information that can be the fuel of any adversary’s fire.
That’s why it’s important that your company and employees are familiar with elicitation techniques http://www.ncis.navy.mil/CoreMissions/CI/PublishingImages/elicitation-new.pdf.
While companies may have more lax security settings, to enable more followers, it’s important that employees are encouraged to keep the privacy on their accounts high. Also, don’t assume that just because an employee may work for you and have a social media account, that they want to be tagged or associated with the company. The more connections people have, the easier it is for an adversary to piece together information that could make them a target.
Share your thoughts on social media best practices, join the discussion on Twitter #ZPSmallBizChat
Connect with Zero Point on Social Media