Monday 20 April 2009

How to cope with Tvitter and Facebook from a security perspective

I have touched upon this subject before but it is worth mentioning again. As a an employer you need to figure out a way to live with the likes of Facebook and Twitter. There are three alternatives; first: do nothing and create a potential security threat, second: make sure that no-one can access those during working hours and live with that valuable employees will leave your organisation or third: deal with the problem using security tools. I believe that as an employer you need to accept the fact that your employees will live a part of their life in cyberspace and I actually do not think that that behaviour is a bad thing. The difference between "private" and "work" is now more blurred then ever. See your team’s activities on Facebook and Twitter as new marketing channels. They can be excellent tools to create loyalty to your company.
From a security standpoint this is the company version of "split tunnelling", the same time a user is connected to a secure internal networks the user is also connected to the outside to an application that can be rated as unsecure. Today there are many ways to deal with this problem, last week we installed a solution that connected the user not directly to the web but through a terminal server at the same time as they where connected to internal applications. I think that we in the future also will se more virtual instances on the PC.

No comments: