Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 271
  • Last Modified:

Should access to LinkedIn be universally allowed in an enterprise?

Hi

An enterprise allows / disallows access to certain actegory of websites using their internal proxy. There is a growing demand for allowing access to linkedIn universally for all employees.

What are the risks of doing so from information risk management perspective and what controls can IT place to mitigate those risks?
0
fahim
Asked:
fahim
1 Solution
 
pjamCommented:
As a rule Facebook, YouTube, LinkedIn et all are blocked here.
0
 
OriNetworksCommented:
This appears to be more of an open ended question rather than one that can receive a direct answer here. Some companies just simply block all forms of social media since it does not usually directly contribute to the productivity of the business. The biggest risk is sharing sensitive data for example uploading a workflow of a sensitive project to a social media group for discussion. If the site is blocked it would be more difficult to share that information either accidentally or on purpose. Regardless this vulnerability exists for many other sites anyway such as pastebin.com where users can randomly upload chunks of text such as database records.

Having a strong policy, constant reminders/training, and enforcing that policy when violations occur are all very important. There are also vendors that offer software and network inspection hardware that can try to keep track of this activity and block or report suspected violations. This is particularly important if the company must abide by laws such as SOX and HIPAA in the U.S. where a leak of data can be VERY expensive to the company but that may be a little too far if we are only talking about giving access to LinkedIn, although it is commonly used as a phishing resource to collect company secrets through social engineering.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now