@Risk

Identity fraud jumped by 13 percent in 2011, and that increase may be the result of consumers’ social media and mobile behaviors.

For the past nine years, Javelin Strategy & Research has conducted an annual analysis of identity fraud trends, and for the first time, the 2011 study examined social media and mobile phone behaviors, ultimately uncovering certain related consumer practices that appear to increase risks.

Here are some of the key findings in more detail:

• The overall number of identity fraud cases is up, but the dollar amount held steady. Javelin found that more than 11.6 million adults became a victim of identity fraud in the US last year, although the dollar amount stolen remained constant. (Javelin defines “identity fraud” as the unauthorized use of another person’s personal information to achieve illicit financial gain.)
• Social behaviors are risky. LinkedIn, Google+, Twitter and Facebook users had the highest incidence of fraud although there is no proof of direct causation.  What’s the risk? Javelin found that consumers share significant amounts of personal information frequently used to authenticate identity. For example: (more…)

We all know that employees use social networks and browser-based file sharing at work. But, new research from Palo Alto Networks reveals just how deeply Web 2.0 tools have penetrated the workplace –and how important it is for companies to prepare for potential threats from social media and file sharing apps.

After analyzing raw application traffic from more than 1,600 enterprises between April 2011 and November 2011, Palo Alto Networks found that:

Social media use is exploding, especially for Twitter. The study revealed that bandwidth consumption for Facebook Apps, Social Plugins and posting increased from 5 percent (October 2010) to 25 percent (December 2011) when measured as a percentage of total social networking bandwidth. Twitter browsing at work alone grew by more than 700 percent year-over-year. (more…)

How careful are employees when it comes to IT security?

Apparently, most aren’t careful, at all. What’s more, most aren’t really concerned whether or not IT policies are followed.

Take a look at these survey results. IT security expert Avira polled nearly 1,000 of its users in September and found that:

• Only 38.95 percent of those participating in the study said they adhere to security policies designed to protect their company.
• About the same amount (35.42 percent) admitted there are security policies in place at their business, but that they didn’t feel that anyone really cared whether those policies were followed or not.
• The remaining 25.63 percent said they see security as a system administrator’s responsibility and not an employee concern. (more…)

Over the past few years, social media has evolved into an essential component of the marketing toolbox.

But, most companies have failed to keep pace with the necessary compliance and risk policies and procedures.

A recent study conducted by Grant Thornton LLP and Financial Executives Research Foundation illustrates the problem. The survey responses from 141 senior financial executives from public and private companies showed that: (more…)

Do you know what your employees, customers and competitors are saying about your company online via social media networks?

Most companies don’t –and that’s starting to cause headaches for risk professionals.

A recent survey by the Federation of European Risk Management Associations and the Institute of Risk Management (IRM) asked risk professionals which three cyber risks they thought were the greatest threats to their own organization and to business, in general.

For business, in general:

• Respondents ranked social media alongside non-malicious operational IT risks, theft of customer information and malicious interference with IT systems as the greatest cyber threats to business. Reputation risk from social media was cited as a material risk by nearly 50 percent of respondents and loss of confidential information through social media by 20 percent.

In terms of exposures to their own organizations, the emphasis shifted somewhat:

• More than half put operational, non-malicious IT risks among the top three, followed by 43 percent theft of customer information (43 percent) and social media risks (42 percent).  21 percent said they were concerned about loss of confidential information through social media.

In other findings: (more…)