Web 2.0 at Work Redefines Security Policy

Web 2.0 applications are springing up everywhere in the enterprise. However, issues including privacy, anonymity, productivity loss, sensitive data breaches and technology vulnerabilities make these applications a security vulnerability that IT managers need to take seriously. As Andrew Jaquith wrote on SecurityMetrics.org “..the Web 2.0 architectural style makes it easier and faster to hose yourself than ever before.”

What’s behind the trend for employees to check out Facebook profiles in their offices or browse the latest videos on YouTube? The driving force behind the explosion of social networking is an insatiable appetite for creating, distributing and collaborating information.

IT managers must maintain a balance for employees that allows for the legitimate business use of Web 2.0 applications – while ensuring security. Below are a few steps that IT managers should take to ensure their organizations don’t get overrun by non-essential Web 2.0 applications:

1. Keep an open attitude towards embracing Web 2.0 technologies to drive efficiencies within your business. Business units often meet IT resistance when they bring Web 2.0 projects such as wikis, blogs, and RSS to the table. These technologies can be secured by looking at them as another content repository that requires logical access and data protection controls.

2. Define an acceptable “Internet Use Policy.” Social networks that don’t support business activities drain company resources. Have your employees provide a signature of acceptance and tuck it away in their HR files.

3. Block unapproved sites (be sure to include anonymous proxies for your unscrupulous users) using Web content filtering technology. Prepare for revolts from your employees by providing a mechanism to request access to sites they feel have legitimate business purposes.

In order to balance between security and evolving technology, IT managers need to decide how the offspring of Web 2.0 fit into their corporate cultures and block unwarranted applications. While Web 2.0 applications do bring some business value to corporations, IT managers might find these applications create more vulnerabilities than business benefits.

Tags: Web 2.0