Blog

Consumer Influences on Most Trusted for Privacy
March 4, 2010
FoxBusiness.com called the other day asking if we might be interested in talking about our annual Most Trusted Companies for Privacy study. Permalink

Use What Works to Create a Culture of Privacy
December 20, 2009
I was in an industrial facility recently and noticed large banners on the walls proclaiming “12 Years without a Safety Incident. Permalink

Training Is the Strongest Link
December 10, 2009
Today we held a RIM College event featuring three noted experts in corporate privacy training programs -- namely, Dean Forbes (Merck), Bob Posch (Merck) and John Block (Media Pro). Permalink

Home » Blog » Susan's Blog » Social Networks Expose Lax Privacy Attitudes » 

RSS Feed

RSS Feed RSS Feed

Social Networks Expose Lax Privacy Attitudes

June 14, 2009

Are online social networking utilities, such as blogs, Facebook, Twitter, LinkedIn, and other popular services changing privacy rules for companies, as this article in Computerworld  suggests, or are the social networking activities of employees simply exposing the poor privacy and security habits of companies?

The Ponemon Institute asked respondents about their social networking habits in our most recent study, Trends in Insider Compliance with Data Security Policies and learned that, while 31% of employees said they access social networking sites while in the workplace, and 34% of those individuals said they have shared information about their place of employment on social networking sites, only 10% said their employer had a written social networking policy.

These findings are consistent with our observation of organizational response to privacy and data security risks in that they show how companies’ policies often lag behind changes to the security environment.

The Ponemon Institute believes that social networking can be a useful and powerful tool for individuals and organizations who consider their strategic value and take thoughtful, necessary precautions to their use.  Without concern for their impact on information security, however, companies that ignore the risks will almost certainly suffer consequences.
 

Posted by Susan Jayson at 5:20 pm


Add Comment (0 comments)