Black Friday Sale! 50% Off All Access

Protect Your Business with 5 Social-Media Security Tips Many company owners are unaware of the risks posed by their employees' online engagement.

By Robert Siciliano Edited by Dan Bova

Entrepreneur+ Black Friday Sale

Our biggest sale — Get unlimited access to Entrepreneur.com at an unbeatable price. Use code SAVE50 at checkout.*

Claim Offer

*Offer only available to new subscribers

Opinions expressed by Entrepreneur contributors are their own.

Social-media use can provide benefits to a small business. Yet, use of social media by employees can compromise the company's security. Many company leaders and business owners don't know this.

Not too long ago I spoke to employees at a credit union about how to respond to a robbery. Prior to my presentation, a staged robbery had occurred, with real police officers posing as the bad guys and wielding guns. The "robbers" barged in, hollering obscenities, brandishing the guns. They did a great mock job: Some of the bank tellers even cried.

Related: 4 Ways to Mount a Cyber Defense in Light of the U.S. Military's Social-Media Hack

When the "crime" concluded, everyone discussed it. This scenario even included a teller being handed the following note that she read aloud: "Your husband works at the Main Street Garage. We intercepted him when he was opening this morning. He is in a trunk at an undisclosed location. If you hit the silent alarm and the police come, we will kill him."

How did the "robbers" know where her husband worked? They searched online for the name of the bank. This led to them to the teller's social-media posts. Then they looked up the husband's workplace. They even found out the times he opened and closed his business.

See how easy it is to scare the daylights out of a victim with a simple note and prompt the person to comply?

Here are some security tips for social-media use and general online use for a company's employees:

Related: A Lesson in Oversharing: Dad Loses $80,000 Because Daughter Blabbed on Facebook

1. Avoid employment disclosure.

Advise employees to not post any information about their job on social media. Though you can't stop people from posting their employer on their Facebook page, some employees will happily follow this instruction to keep their business information separate from social media. Explain how it could be used maliciously.

Employees should be educated about how associating the company with their personal account on a slightly questionable social network could backfire and hurt the company -- and cause a ripple effect and hurt the employee.

2. Teach employees to manage their privacy settings.

Staffers' social-media accounts should be set up for their maximum protection. They should not rely on the default settings, which might let their social-media accounts be subject to cyber attacks. Inform employees that the highest privacy settings are not enough to provide complete protection but are far better than the default or lower settings.

3. Implement a workplace social-media policy.

Set up a workplace policy for the company's social media accounts with rules about the following: What can be said? What's prohibited (slang words, racist remarks)?

Related: Writing Social Media Guidelines for Your Company? Tread Carefully.

4. Don't ban social media use in the office.

If you ban social media at work, there will always be someone who will ignore this directive and figure out a way to get around the firewall. Once they do something like this, the network will become more vulnerable.

5. Train the IT specialists.

The company's technical staffers are in the trenches, along with managers. They devise and manage the technology for combatting online-security issues at your workplace. The IT and management teams must be kept informed about social-media security risks.

In additional, the internal policy for employees' online use must be continually updated, revised and enforced. What employees do online requires ongoing surveillance. Their use of company equipment to access certain websites could be restricted. To accomplish this, a business must invest in antivirus protection, consulting, software and hardware. Finally make sure computer operating systems are always kept up-to-date.

Related: Social Media Security Lessons From the U.S. Army

Robert Siciliano

Personal Security, Privacy and Identity Theft Expert

Robert Siciliano, CEO of IDTheftSecurity.com, is committed to informing, educating and empowering Americans so they can be protected from violence and crime in the physical and virtual worlds.

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Science & Technology

I've Spent 20 Years Studying Focus. Here's How I Use AI to Multiply My Time and Save 21 Weeks of Work a Year

AI is supposed to save time, but 77% of employees say it often costs more time due to all the editing it requires. Instead of helping, it can become a distraction. But don't worry — there's a better way.

Business News

The Two Richest People in the World Are Fighting on Social Media Again

Jeff Bezos and Elon Musk had a new, contentious exchange on X.

Business Ideas

63 Small Business Ideas to Start in 2024

We put together a list of the best, most profitable small business ideas for entrepreneurs to pursue in 2024.

Money & Finance

Why Donald Trump's Business-First Policies Trump Harris' Consumer-Centric Approach

President Donald Trump's pro-business agenda is packed with policy moves encouraging investment to drive economic growth. The next Congress has a unique opportunity to support entrepreneurship and innovation, improving U.S. competitiveness with the rest of the world.

Business News

Barbara Corcoran Says This Is the Interest Rate Magic Number That Will Make the Market 'Go Ballistic'

Corcoran said she praying for lower interest rates and people are "tired of waiting."

Growing a Business

Build a Business That Will Sell: From Valuations to a Successful Exit

Join us for this free webinar and learn how to develop a business that buyers will find irresistible.