Don’t let Social Media turn you into an Insider Threat

For many of us, social media has become an essential tool in both our personal and business lives. However, sharing information on social media can be tricky. There really is no way to guarantee the information you share won’t end up in the wrong hands. 

Account Security Questions

Security questions rely on personal information that is often shared on social media.

Turn on Multi-factor Authentication for Accounts. This can lessen the impact of any security questions that become compromised.

Use and Memorize Fake Information for Security Questions. You can manage or even generate these answers using a password manager. Alternatively, instead of using more common security questions - like mother’s maiden name - you should set up your own unique questions whenever possible. Use this list when setting up your security questions.

Location Information

Location can give away important information about your organization or whereabouts.

Monitor Your App Settings. When traveling for business, don’t let your apps “check you in.” And don’t post pictures or information about your trip unless it is public information.

Wait Until After a Trip to Post. When on vacation, wait until you return to post pictures and travel logs.

Limit Posting Office or Dorm Photos. Even if the location of your organization’s office is publicly known, posting photos online can give away information on physical security measures and floorplans.

Online Support Forums

It can be easy to unintentionally reveal sensitive organizational information, such as a particular product name and version or  IP address.

Be Careful on Online Support Forums. If you are unsure about what is safe to share, check with your IT department first.

Project Information

Sensitive information about projects or work processes can be inadvertently shared online.

Be Careful to Only Share Public Project Information. While professional social networking sites invite us to share the great work we’re doing, be sure to only share project deliverables or content that is marked for public distribution or already publicly available, like a blog post
or video.