Yes, I’ve got life outside Facebook! (…But I forgot the password) Security Policy in the social media domain -Presented at InfoSec 2011

1. Yes, I’ve got life outside Facebook!
(…But I forgot the password)
Shahar Geiger Maor, Senior Analyst
www.shaharmaor.blogspot.com http://www.facebook.com/shahar.maor http://twitter.com/shaharmaor

2. So, What’s new in the Social Media
These Days?
http://www.facebook.com/pages/Planking-Australia/147452668649160#!/pages/Planking-
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 2
Australia/147452668649160?closeTheater=1

3. So, What’s new in the Social Media
These Days?
http://www.bbc.co.uk/news/world-middle-east-13417930graphic
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of 3

4. So, What’s new in the Social Media
These Days?
http://bits.blogs.nytimes.com/2011/05/17/a-social-network-for-making-future-plans/
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 4

5. Decisions will be based on:
Friends recommendations
Future Rewards
Relevance privileges
Coupons
miles
Analytics
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 5

6. You can’t afford to ignore
the “social elephant” in your room
For more info:
http://www.slideshare.net/Galit/social-media-and-mobile-presentation-2011
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 6

7. 2010 –The REAL Beginning of
Enterprise Social Media
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 7

8. Many Channels, One Strategy
What kind of new channels strategy do you have for 2011?
Full multichannel integration strategy 23%
Dealing with new channels now &
integration later 57%
Wait to see how these new markets will
20%
evolve
Shahar Maor’s work Copyright 2011 @STKI Do not remove Surveyattribution from any graphic or portion of graphic
Source: STKI source or 2011 8

9. “Social Security”
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 9

10. Malicious Websites by Search Term
31% Is social network related
http://www.symantec.com/business/threatreport/build.jsp
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 10

11. What’s going on Abroad?
Source: Nemertes
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 11

12. Internet Policy –Allowing Facebook?
Israel: Cross-Sector, March 2011
Limited Yes
27% 38%
No
35%
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic
Source: STKI 12

13. Internet Policy –Allowing Facebook?
Industry Healthcare Finance
Yes
Yes Yes
Limited 12%
37% 33%
38% No
25%
Limited
No 63%
67%
No
25%
Services High-Tech Government
Limited No Limited Yes
14% 17% 23% 15%
No
14%
Yes
72% Yes No
83% 62%
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic
Source: STKI 13

14. Internet Policy –Allowing Skype?
Israel: Cross-Sector, March 2011
Limited
4%
Yes
18%
No
78%
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic
Source: STKI 14

15. Internet Policy –Allowing YouTube?
Israel: Cross-Sector, March 2011
Limited Yes
24% 38%
No
38%
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic
Source: STKI 15

16. Internet Policy –Allowing YouTube?
Industry Healthcare Finance
Yes
Limited Yes Yes
25%
25% 37% 33%
No
Limited 12%
No 63%
No 67%
38%
Services High-Tech Government
Limited Limited Limited Yes
14% 17% 15% 31%
Yes
No 50%
29% Yes
57% No
33% No
54%
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic
Source: STKI 16

17. Internet Policy
–Allowing Streaming (in general)?
Israel: Cross-Sector, March 2011
Limited Yes
24% 25%
No
51%
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic
Source: STKI 17

18. Internet Policy –Allowing Gmail?
Israel: Cross-Sector, March 2011
Limited
18%
No
Yes
24%
58%
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic
Source: STKI 18

19. Internet Policy –Allowing P2P?
Israel: Cross-Sector, March 2011
Limited
4%
No
96%
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic
Source: STKI 19

20. 10 Steps to Social-Computing
Compliance
Step 3 – Formal Step 4– Strong
Step 1 – Take Step 2 –Establish
education password
ownership policy
program management
Step 5 – Content Step 6 – Selective Step 7– Routine
Step 8 – Regular
monitoring and blocking of audits and review
policy review
logging content of logs
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 20

21. “Social Security” –Key Takeaways
• Social media is all around us
• Corporate network is opening up?
• Most employees use social media for leisure time
• From Perimeter security to data security
• Recommendations:
– CIO’s: Find the balance between business necessity,
productivity, network considerations and security
– CISO: Get involved!
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 21

22. Thank you!
Shahar Maor’s work Copyright 2011 @STKI Do not remove source or attribution from any graphic or portion of graphic 22