Solved

Should access to LinkedIn be universally allowed in an enterprise?

Posted on 2014-03-07
2
257 Views
Last Modified: 2014-04-04
Hi

An enterprise allows / disallows access to certain actegory of websites using their internal proxy. There is a growing demand for allowing access to linkedIn universally for all employees.

What are the risks of doing so from information risk management perspective and what controls can IT place to mitigate those risks?
0
Comment
Question by:fahim
2 Comments
 
LVL 17

Expert Comment

by:pjam
ID: 39912389
As a rule Facebook, YouTube, LinkedIn et all are blocked here.
0
 
LVL 17

Accepted Solution

by:
OriNetworks earned 500 total points
ID: 39912566
This appears to be more of an open ended question rather than one that can receive a direct answer here. Some companies just simply block all forms of social media since it does not usually directly contribute to the productivity of the business. The biggest risk is sharing sensitive data for example uploading a workflow of a sensitive project to a social media group for discussion. If the site is blocked it would be more difficult to share that information either accidentally or on purpose. Regardless this vulnerability exists for many other sites anyway such as pastebin.com where users can randomly upload chunks of text such as database records.

Having a strong policy, constant reminders/training, and enforcing that policy when violations occur are all very important. There are also vendors that offer software and network inspection hardware that can try to keep track of this activity and block or report suspected violations. This is particularly important if the company must abide by laws such as SOX and HIPAA in the U.S. where a leak of data can be VERY expensive to the company but that may be a little too far if we are only talking about giving access to LinkedIn, although it is commonly used as a phishing resource to collect company secrets through social engineering.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now