July 2008 Social networking poses an IT security threat

Recent research suggests that more than twice as many UK employees are using company networks to access social networking sites compared to last year.

This is not only leading to a decline in staff productivity but also an increased security risk as cyber criminals spot a new opportunity.

Mark Murtagh, Technical Director of IT security company Websense (MJC’s email and web security partner) warns the rise of web 2.0 applications is creating "security and productivity challenges" for all small and medium size businesses.

The issue of data theft should be of particular concern to SMEs, according to Websense, not least because nearly half of survey respondents admitted to engaging in activities that could put their company's data at risk.

Murtagh blames "smaller IT budgets and fewer technical staff" for punching holes in SMEs' internet security systems. Plus data-theft risk resulting from companies' failure to control the use of peer-to-peer applications or to block access to phishing websites.

It is estimated that nearly 30% of UK employees have visited social networking sites using company networks this year, with a big proportion of these being mobile workers using laptops.

MJC’s Technical Manager, David Pagett sees this as growing problem saying ‘Sites with user generated content, which also include blogs and wikis, ensures users may naively download malicious applications to the detriment of their organisation’.

In January social networking site Facebook banned the "Secret Crush" third party application after users were tricked into downloading spyware by a promise to identify an admirer. This proves that even the most high-profile sites get caught out, making it easier for cybercriminals to present applications or embed hidden code aimed at data collection. The problem is that sites are often reluctant to use controls that may slow down content delivery.

MJC can advise on all aspects of IT security, to find out more arrange a free network appraisal or call our Marketing Team on 0870 0660663.