Social Media Governance

Parakum Pathirana Head of IT Security & Compliance/ Principal Consultant – LOLC Technologies Vice President – ISACA Sri Lanka Chapter MSc, FBCS, CISA, CISM, CGEIT, CISSP, ISO 27001 LA, MCP, CHFI, QCS, ITIL

Disclaimer

• I’m employed in the #infosec industry, however not authorized to speak on behalf of my employer/ clients

• Everything you hear can be blamed on the voices in your head

My credentials

• 7+ years in #Infosec field

• Tutor, consultant/ advisor, auditor, head of InfoSec

• Sectors: financial, leisure, manufacturing, advertising, gov, insurance, etc.

• Crazy about #cycling, #infosec, #socialmedia

• Still learning and not an expert at anything

• lk.linkedin.com/pub/parakum-pathirana/2/a52/2a2/

Agenda

• Intro - VIDEO

• Social Media - Definition

• How users are affected?

• How governments are affected?

• How organizations are affected?

• Social Media - The bigger picture

• Key concerns

• LOLC's approach

Intro

Source: Erik Qualman

Intro

Source: http://www.youtube.com/user/officialjohnmcafee

Social Media - Definition

• “Group of Internet based applications that build on the ideological and technological foundations of Web 2.0 and that allow the creation and exchange of user generated content” - M. Kaplan & H. Michael 2010

• Some Applications

• Wikipedia - reference

• Facebook - social networking

• YouTube - video sharing

• Second Life - virtual reality

• Flicker - photo sharing

• LinkedIn - for the business community

• Social Media Vs. Traditional media

How users are affected?

How government’s are affected?

@!#$%^&*())?><:

Social Media Governance - Definition

• More than a policy

• Has a greater significance

• Model should contain guidelines, processes, user awareness and training, etc.

Social Media Governance – The bigger picture

• Companies leverage on social media from a marketing point of view

• building brand

• engaging with customers

• the new marketing tool

• here to stay

• Risk management point of view

• External – how do you deal with it from a marketing point of view? e.g. advertising companies

• Internal – do you have a social media policy for employees? Do you monitor social media?

Key concerns

Questions triggered by Social Media Key issues for Social Media

product champion

Does our business get value from Social Media?

Is Social Media really helping my business?

How will we ensure an integrated view of the customer?

How is social media aligned

to the business?

How can I get this key initiative prioritised?

How can I ensure appropriate control over social media spend

and risk?

Are we investing our time and money appropriately?

How should social media

decisions be made?

What should be the social media spend this year?

Who owns social media?

How do we manage social

media investments?

How do I get funding for this new project?

Who needs to approve this project?

Who is accountable for social media results?

What happens when my experiment budget runs out?

What regulations are relevant and how do we comply?

What controls do we need in

place?

Where do I want social media champions to focus?

What service levels should I expect from social media partners?

What areas of social media governance should I approve?

How do we measure and

reward?

Social Media Governance.com Empowerment With AccountabilityTM

Social Media Governance Model – Core Components

• Updated Social Media Policy

• Awareness & Training

• Continues Monitoring

• Crisis Management Plan – should this be part of your BCP?

LOLC’s Approach

• Formulate a Social Media Strategy

• Policies, procedures, guidelines, tone at the top

• Experiment where it’s possible & learn

• Corporate culture Vs. Social Media

• Roles and responsibilities

• Employee awareness and empowerment

• Learn from “near” mistakes

Q & A