Slashdot Mirror


Businesses Struggle To Control Social Networking

Lucas123 writes "Businesses in highly regulated industries are trying to strike a balance between workers who use social networking sites such as Twitter, Facebook, and LinkedIn to communicate, and trying to satisfy federal requirements to monitor, capture, and audit all forms of electronic communications. As with instant messaging a decade ago, corporations are first blocking all access to the applications, and then considering what tools may be available to control them in the future. A cottage industry is being built around software that can not only control access to social networking websites but also ensure conversations over those websites can be stored for electronic discovery purposes."

16 of 131 comments (clear)

  1. Why not block them entirely? by eviloverlordx · · Score: 3, Insightful

    Aren't these people supposed to be, you know, working?

    --
    'Loose' is when your pants are three sizes too big. 'Lose' is when you misuse 'loose'.
    1. Re:Why not block them entirely? by the1337g33k · · Score: 4, Insightful

      Exactly, thats what I do. The company pays people to work, not play farmville.

    2. Re:Why not block them entirely? by andrewd18 · · Score: 5, Insightful

      Or post on Slashdot.

    3. Re:Why not block them entirely? by swanzilla · · Score: 4, Insightful

      Aren't these people supposed to be, you know, working?

      There exist lines of work that both require access to social media sites, and require capture/reporting of said access.

      RFTA. It is quite interesting.

    4. Re:Why not block them entirely? by Captain+Splendid · · Score: 5, Insightful

      The company pays people to work, not play farmville.

      Then the company is stupid. We have decades' worth of scientific and anecdotal evidence that putting human monkeys in tight little boxes is Not A Good Thing, both for the monkey and the maker of the box.

      My employees have two rules to follow: 1. Get the job done. 2. Don't embarrass the company. Compliance with them ensure a wide variety of perks and other 'human' touches which both they and I appreciate. Anything not covered by the two rules is already small potatoes and not worth pulling your hair out. Everybody wins.

      Disclaimer: This management method looks like it would be a bitch to scale. Not my fucking problem, thank Cthulu.

      --
      Linux, you magnificent bastard, I read the fucking manual!
    5. Re:Why not block them entirely? by bennomatic · · Score: 4, Interesting

      Disclaimer: This management method looks like it would be a bitch to scale.

      Good point; it may be worth considering that if your company is so big that treating people like human beings doesn't scale, it's time to break up into smaller, more manageable units.

      I read somewhere that 3M Corp actually does that, breaking off independent business units for each product line. As soon as a particular unit gets to be above 300 people, they figure, they can safely be split in two. If one of the two parts can't survive on its own, they let it die, as it was probably a drain on the bottom line anyway.

      --
      The CB App. What's your 20?
    6. Re:Why not block them entirely? by dave562 · · Score: 3, Informative

      Pretty much any company that produces a product has a justification for having at least some of their employees involved in social networking. I work for an organization that lives and dies by public perception and participation. A portion of our communications department is devoted to social networking.

      As the person in charge of IT policy, I fought against giving people access for the longest time. I based my argument on the security considerations of social networking sites (Flash exploits, Javascript vulnerabilities, etc.) I eventually lost the battle because I can see the compelling reasons to allow access. The pros outweigh the cons in my particular organization. I had to setup an extra layer of redundency including up to date workstation images and additional security software (proxy / webfilter, etc). I'd rather block the sites entirely but in the end it wasn't my call.

    7. Re:Why not block them entirely? by Captain+Splendid · · Score: 4, Insightful

      Some interesting points there. Shame that advocating breaking up successful companies in order to maximize employee contentment (and, perhaps, productivity and other 'useful' things) would make an MBA have a heart attack.

      --
      Linux, you magnificent bastard, I read the fucking manual!
  2. Old tangible vs. intangible model. by JustinOpinion · · Score: 4, Insightful

    Hm. I wonder if we perhaps need to rethink the difference between communication and documentation. The current rule seems to be that in regulated industries, any electronic document is subject to documentation/retention requirements. However this comes from an old model, where documents were somehow "official". So things like face-to-face conversations, or telephone calls, were not required to be recorded and archived. But anything written on paper was supposed to be archived to create a paper-trail, and because these were the "official documents".

    In a modern world, some electronic documents (PDFs, word processor documents, emails, etc.) have taken the place of "official paper documents", and other electronic communications (instant messaging, social networking sites, etc.) have taken the place of the less-formal communication modes. (Obviously phones and face-to-face conversations still exist, also.)

    On the one hand, it seems like the more documentation we can retain in regulated industries, the better off we are. (In case of negligence or malfeasance, it makes it possible to assign blame, bring people to justice, avoid repeating mistakes, etc.) On the other hand, as long as we are allowing some communication modes to be informal or undocumented, then allowing other modes that are also undocumented doesn't seem to change much. (People who want to have secret conversations will surely find a way to do it.)

    I'm not sure what the right answer is. But I'm not convinced that making all electronic modes of communication subject to the same level of recording/documentation/archiving really makes sense.

    1. Re:Old tangible vs. intangible model. by Anonymous Coward · · Score: 3, Insightful

      The problem is that in a regulated industry (in all industries, actually), there is no such thing as a communication that is not "official." If one of your agents makes a representation, and one of your stakeholders acts on that representation, then you are responsible for it. It doesn't matter how that representation was communicated. Whether or not the document was stamped "official" or not is irrelevant.

      What's happening now is that firms are given the tools for rapid and wide communication, and they are coming up against the same old problems of information leakage and people saying things that they shouldn't. But unlike the old days when such things were just verbal and impossible to capture, now they are persistent and can be automatically captured.

  3. iPhones and Androids and HTC Heros, Oh My by Darth+Sdlavrot · · Score: 3, Insightful

    Stockbrokers with smartphones. Ain't going to stop 'em.

  4. HTTP over SOCKS over SSH over SSL thankyouverymuch by Gothmolly · · Score: 3, Interesting

    Websense can suck it.

    --
    I want to delete my account but Slashdot doesn't allow it.
  5. Until the first lawsuit. by khasim · · Score: 3, Insightful

    The reason for the documention (and control that such requires) is to keep the company on the right side of the law.

    Being able to show the EXACT communication that took place can save a lot of money in fines.

  6. Department of Defense is struggling with this also by Message · · Score: 5, Interesting

    The DoD has been struggling with this same issues as well, they recently issued guidance that opened up social media on their networks.

    http://socialmedia.defense.gov/index.php/2010/02/26/dod-official-policy-on-newsocial-media/

  7. Re:HTTP over SOCKS over SSH over SSL thankyouverym by BitZtream · · Score: 3, Insightful

    If you think you're special because you can do that to get around a block then you are confused. If you can use this sort of workaround then your admins are either idiots or don't actually want to stop you, they just want you to go out of your way enough that its obvious you were breaking the rules.

    Either way, you aren't special.

    --
    Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
  8. Re:WTF?!? by MozeeToby · · Score: 3, Interesting

    There's rules about what financial advisers can and can't advertise with. Basically, everything they put out to the customers usually has to be put through their broker dealer's compliance department. "Offering the same warning they did more than a decade ago" just means reminding them that if you're using Facebook or Twitter to communicate with your clients you better be putting it through compliance first.