Websites based on user-generated content, blogging or
participation are frequently visited by office workers, but content
security firm Clearswift's survey claims that firms are failing to
see the risks of data leak posed by those sites.
It found that 14.6% of the 939 business surveyed are not aware
of social media and have no policy on it, while 19% of companies do
not have a policy governing appropriate use of the internet by
employees.
The research found that 35% of companies do not monitor
employees' use of the internet, so would have no idea whether or
not they were using social media sites and would not be able to
trace the source of any leak on those sites.
“It is clear that organizations don’t equate employee use of
social media sites with potential security breaches which is a
worrying sign," said Clearswift chief executive Jon Lee.
"Recognising the threat is the first and foremost priority, and it
is clear that education measures still have some way to go."
“Research has shown that employees, particularly younger
employees, are using these Web 2.0 technologies heavily at work,
and the risk for potential loss of confidential information via
these sites is very real. Organisations need to reassess their
security policies and precautions in light of the growing
popularity and business use of Web 2.0 technologies," he said.
Earlier research by the company unveiled the scale of the use of
collaborative websites by workers. A quarter of young office
workers in the UK spent more than three hours a week on sites such
as YouTube, MySpace or Bebo. It found that 42% of those
people discussed work on those sites.
The survey showed that companies were worried about loss of
confidential data, rating it the second most important security
issue behind viruses, but were complacent about social media's role
in that loss. Leaks from blogs, forums and instant messaging chats
were all put right at the bottom of the list of threats ranked by
importance.
A second survey has claimed that a quarter of organisations do
not police wireless internet security. The survey, conducted
amongst 320 companies by conference organisers Infosecurity Europe,
found that even though workers are increasingly using wireless
networks in and out of the office, 26% of companies do not enforce
a wireless security policy.
