Staff use of Web 2.0 is unseen threat, survey says

Over one third of businesses do not monitor their employees' internet use, according to a survey carried out by an information security firm. The research found that companies are underestimating the data risk posed by so-called Web 2.0 sites. Websites based on user-generated content, blogging, or participation are frequently …

[Register Reader]

What the..

How is this any more of a risk than employees using email, or talking to people on the phone? What is so different about social networking sites that suddenly employees are going to start talking about company secrets rather than just catching up with their friends. What a load of tosh, as El Reg would say..

[Dan]

An unknown risk

The problem of informational leakage is basically the same as email. But I bet more companies are aware of the danger of leaks via email (and thus they monitor and retain emails) than are aware of the same risk through "social media" sites.

[Chuck]

The wrong path

Blocking user access to potentially useful resources isn't the answer. Education about identifying and dealing with Privileged, Private, and Secure Information is.

If you treat your employees like criminals, they'll ultimately start <i>feeling</i> like criminals. Better to empower them to make good decisions about disseminating company or customer IP, regardless of the medium.