Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Identity & Access

From Understanding Social Media Risks to Preventing Them

Enterprises Must Monitor Their Entire Digital Shadow in Order to More Accurately Identify Specific Risks as They Unfold

Enterprises Must Monitor Their Entire Digital Shadow in Order to More Accurately Identify Specific Risks as They Unfold

In a recent column, I discussed the importance of opening your eyes to the specific risks that the use of social media can present to your organization. Now that you have a better understanding of these risks, what options do you have to better protect your organization against them?

Early detection is imperative for mitigating social media risks. With the help of intelligence services you can improve your organization’s situational awareness to identify and even anticipate certain challenges in order to strengthen your defenses. Here are five aspects you should consider when evaluating these types of services and establishing best practices for monitoring social media risks.

Monitoring Your Digital Shadow1. Measure and expand your understanding of your organization’s risk from online exposure. Because data leakage can never be completely prevented, the goal must be to detect it as soon as possible. Intelligence services that have the capacity to examine a multitude of multi-lingual and diverse sources can provide greater assurance that all points of compromise on social media are considered.

2. Enforce a proactive approach to defense against targeted cyber attacks by having greater situational awareness of adversaries, their tactics and motives. The intelligence services you invest in should continuously monitor hostile groups and their operations.  Many services cover criminal forums and ‘dark web’ sites but organizations also need to monitor social media to detect targeted attacks, social engineering and hacktivist campaigns specific to their firm.

3. Monitor online mentions of your organization and brand names, and subsequently identify and swiftly remove potentially harmful material before it spreads and causes further damage. Because the publishing of damaging material can never be completely prevented, the best option is for organizations to detect it as soon as possible. To effectively protect your brands, monitoring services should be tailored to your organization as every brand is unique.

4. Monitor the digital shadows cast by high-value or high-risk individuals within your organization. Because of the potential for abuse and harm, potential threats to VIPs must be detected and handled as soon as possible. Continuous monitoring services that cover a range of geographies and sources, and enable you to identify personal threats, can reveal false identities and prevent the exposure of sensitive personal information that could lead to coercion, crime or physical harm.

5. Design a social media policy that allows the monitoring of your employees’ digital shadows. Ensure this policy is reviewed frequently to keep it up to date. Employees need to be aware that their presence on social media may be monitored as they constitute part of the organization’s digital shadow. It is the employer’s responsibility to train employees to comply with the policy.

It isn’t sufficient to open your eyes to social media risks. You need to keep them open by way of constant surveillance. With the right external intelligence services, you can continuously monitor your organization’s entire digital shadow in order to more accurately identify specific risks as they unfold. This intelligence equips you with better situational awareness so that you can pre-empt cyber attacks and security breaches at the earliest possible stage, as well as implement a proactive, intelligence-led approach to defending your organization against such events.

Advertisement. Scroll to continue reading.
Written By

Alastair Paterson is the CEO and co-founder of Harmonic Security, enabling companies to adopt Generative AI without risk to their sensitive data. Prior to this he co-founded and was CEO of the cyber security company Digital Shadows from its inception in 2011 until its acquisition by ReliaQuest/KKR for $160m in July 2022. Alastair led the company to become an international, industry-recognised leader in threat intelligence and digital risk protection.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Understand how to go beyond effectively communicating new security strategies and recommendations.

Register

Join us for an in depth exploration of the critical nature of software and vendor supply chain security issues with a focus on understanding how attacks against identity infrastructure come with major cascading effects.

Register

Expert Insights

Related Content

Identity & Access

Zero trust is not a replacement for identity and access management (IAM), but is the extension of IAM principles from people to everyone and...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Compliance

Government agencies in the United States have made progress in the implementation of the DMARC standard in response to a Department of Homeland Security...

Email Security

Many Fortune 500, FTSE 100 and ASX 100 companies have failed to properly implement the DMARC standard, exposing their customers and partners to phishing...

Funding/M&A

The private equity firm merges the newly acquired ForgeRock with Ping Identity, combining two of the biggest names in enterprise IAM market.

Identity & Access

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the...

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...