Solved

Should access to LinkedIn be universally allowed in an enterprise?

Posted on 2014-03-07
2
258 Views
Last Modified: 2014-04-04
Hi

An enterprise allows / disallows access to certain actegory of websites using their internal proxy. There is a growing demand for allowing access to linkedIn universally for all employees.

What are the risks of doing so from information risk management perspective and what controls can IT place to mitigate those risks?
0
Comment
Question by:fahim
2 Comments
 
LVL 17

Expert Comment

by:pjam
ID: 39912389
As a rule Facebook, YouTube, LinkedIn et all are blocked here.
0
 
LVL 17

Accepted Solution

by:
OriNetworks earned 500 total points
ID: 39912566
This appears to be more of an open ended question rather than one that can receive a direct answer here. Some companies just simply block all forms of social media since it does not usually directly contribute to the productivity of the business. The biggest risk is sharing sensitive data for example uploading a workflow of a sensitive project to a social media group for discussion. If the site is blocked it would be more difficult to share that information either accidentally or on purpose. Regardless this vulnerability exists for many other sites anyway such as pastebin.com where users can randomly upload chunks of text such as database records.

Having a strong policy, constant reminders/training, and enforcing that policy when violations occur are all very important. There are also vendors that offer software and network inspection hardware that can try to keep track of this activity and block or report suspected violations. This is particularly important if the company must abide by laws such as SOX and HIPAA in the U.S. where a leak of data can be VERY expensive to the company but that may be a little too far if we are only talking about giving access to LinkedIn, although it is commonly used as a phishing resource to collect company secrets through social engineering.
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

On Beyond Tools A conversation I recently had with the DevOps manager of a major online retailer really made me think about DevOps monitoring tools (https://www.onpage.com/devops-incident-management-tool/). The manager and I discussed how sever…
Each year, investment in cloud platforms grows more than 20% (https://www.immun.io/hubfs/Immunio_2016/Content/Marketing/Cloud-Security-Report-2016.pdf?submissionGuid=a8d80a00-6fee-4b85-81db-a4e28f681762) as an increasing number of companies begin to…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question