The millennial workforce is very comfortable communicating over social media. The millennial workforce is growing quickly. Gen-Y will form 75% of the workforce by 2025. At the same time, customers seek information about products and services via social media. But this also raises privacy and security concerns in an organization. This could also have implications on data privacy. The IT Dept. must form Social Media policies about the use of social media in the organization, in the interest of protecting the company’s intellectual property. The session will provide guidelines on what CIOs and CISOs must consider for inclusion in their Social Media Governance and policies. Key note speech at INTEROP Sri Lanka September 2013 http://digit.lk/event/interop-conference-colombo-2013/

1. Social Media Governance
Parakum Pathirana
Head of IT Security & Compliance/ Principal Consultant – LOLC Technologies
Vice President – ISACA Sri Lanka Chapter
MSc, FBCS, CISA, CISM, CGEIT, CISSP, ISO 27001 LA, MCP, CHFI, QCS, ITIL

2. Disclaimer
•I’m employed in the #infosec industry, however not authorized to speak on behalf of my employer/ clients
•Everything you hear can be blamed on the voices in your head 

3. My credentials
•7+ years in #Infosec field
•Tutor, consultant/ advisor, auditor, head of InfoSec
•Sectors: financial, leisure, manufacturing, advertising, gov, insurance, etc.
•Crazy about #cycling, #infosec, #socialmedia
•Still learning and not an expert at anything
•lk.linkedin.com/pub/parakum-pathirana/2/a52/2a2/

4. Agenda
•Intro - VIDEO
•Social Media - Definition
•How users are affected?
•How governments are affected?
•How organizations are affected?
•Social Media - The bigger picture
•Key concerns
•LOLC's approach

5. Intro
Source: Erik Qualman

6. Intro
Source: http://www.youtube.com/user/officialjohnmcafee

7. Social Media - Definition
•“Group of Internet based applications that build on the ideological and technological foundations of Web 2.0 and that allow the creation and exchange of user generated content” - M. Kaplan & H. Michael 2010
•Some Applications
•Wikipedia - reference
•Facebook - social networking
•YouTube - video sharing
•Second Life - virtual reality
•Flicker - photo sharing
•LinkedIn - for the business community
•Social Media Vs. Traditional media

8. How users are affected?

9. How government’s are affected?

10. @!#$%^&*())?><:

11. Social Media Governance - Definition
•More than a policy
•Has a greater significance
•Model should contain guidelines, processes, user awareness and training, etc.

12. Social Media Governance – The bigger picture
•Companies leverage on social media from a marketing point of view
•building brand
•engaging with customers
•the new marketing tool
•here to stay
•Risk management point of view
•External – how do you deal with it from a marketing point of view? e.g. advertising companies
•Internal – do you have a social media policy for employees? Do you monitor social media?

13. Key concerns
Questions triggered by Social Media
Key issues for Social Media product champion
Does our business get value from Social Media?
Is Social Media really helping my business?
How will we ensure an integrated view of the customer?
How is social media aligned to the business?
How can I get this key initiative prioritised?
How can I ensure appropriate control over social media spend and risk?
Are we investing our time and money appropriately?
How should social media decisions be made?
What should be the social media spend this year?
Who owns social media?
How do we manage social media investments?
How do I get funding for this new project?
Who needs to approve this project?
Who is accountable for social media results?
What happens when my experiment budget runs out?
What regulations are relevant and how do we comply?
What controls do we need in place?
Where do I want social media champions to focus?
What service levels should I expect from social media partners?
What areas of social media governance should I approve?
How do we measure and reward?
Social Media Governance.com Empowerment With AccountabilityTM

14. Social Media Governance Model – Core Components
•Updated Social Media Policy
•Awareness & Training
•Continues Monitoring
•Crisis Management Plan – should this be part of your BCP?

15. LOLC’s Approach
•Formulate a Social Media Strategy
•Policies, procedures, guidelines, tone at the top
•Experiment where it’s possible & learn
•Corporate culture Vs. Social Media
•Roles and responsibilities
•Employee awareness and empowerment
•Learn from “near” mistakes

16. Q & A