Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Should access to LinkedIn be universally allowed in an enterprise?

Posted on 2014-03-07
2
Medium Priority
?
267 Views
Last Modified: 2014-04-04
Hi

An enterprise allows / disallows access to certain actegory of websites using their internal proxy. There is a growing demand for allowing access to linkedIn universally for all employees.

What are the risks of doing so from information risk management perspective and what controls can IT place to mitigate those risks?
0
Comment
Question by:fahim
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 17

Expert Comment

by:pjam
ID: 39912389
As a rule Facebook, YouTube, LinkedIn et all are blocked here.
0
 
LVL 17

Accepted Solution

by:
OriNetworks earned 1500 total points
ID: 39912566
This appears to be more of an open ended question rather than one that can receive a direct answer here. Some companies just simply block all forms of social media since it does not usually directly contribute to the productivity of the business. The biggest risk is sharing sensitive data for example uploading a workflow of a sensitive project to a social media group for discussion. If the site is blocked it would be more difficult to share that information either accidentally or on purpose. Regardless this vulnerability exists for many other sites anyway such as pastebin.com where users can randomly upload chunks of text such as database records.

Having a strong policy, constant reminders/training, and enforcing that policy when violations occur are all very important. There are also vendors that offer software and network inspection hardware that can try to keep track of this activity and block or report suspected violations. This is particularly important if the company must abide by laws such as SOX and HIPAA in the U.S. where a leak of data can be VERY expensive to the company but that may be a little too far if we are only talking about giving access to LinkedIn, although it is commonly used as a phishing resource to collect company secrets through social engineering.
0

Featured Post

Looking for the Wi-Fi vendor that's right for you?

We know how difficult it can be to evaluate Wi-Fi vendors, so we created this helpful Wi-Fi Buyer's Guide to help you find the Wi-Fi vendor that's right for your business! Download the guide and get started on our checklist today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A look at what happened in the Verizon cloud breach.
The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question