Use of U.S. DoD visual information does not imply or constitute

Use of U.S. DoD visual information does not imply or constitute DoD endorsement. SOCIAL MEDIA AND THE WORKPLACE How to affectively engage with social media January 2020 Allen Westley, Director of Cyber Intelligence

Social Media - Agenda Click to edit Master text styles Second level Third Fun Facts level Fourth level Topics Fifth level Employer Responsibilities Employee Responsibilities Embrace Platforms Cautiously Online Social Engineering Develop Professional Brand Questions L3HARRIS Social Media and the Workplace 2

Social Media - Fun Facts Click YouTube to editStats Master text styles Fourth level Second Morelevel video is uploaded to YouTube every month thanFifth the level three major broadcasting networks created over Third thelevel course of six decades Twitter Stats There’s a lot of empty space on Twitter. Although there are 1.3 billion Twitter accounts, only about a quarter of them – 336 million – are active every month LinkedIn 25 million LinkedIn profiles are viewed everyday https://www.searchenginejournal.com/social-media-facts/258533/#close L3HARRIS Social Media and the Workplace 3

Social Media - Employer Responsibilities Click Policy to edit Master text styles Fourth level levelemployees with access to social media policyFifth level Second Provide Third level Conduct social media policy review annually for applicability Procedures Make procedures for reporting compromised social media available to employees Training Provide social media training to employees annually https://www.searchenginejournal.com/social-media-facts/258533/#close L3HARRIS Social Media and the Workplace 4

Social Media - Employee Responsibilities Click Policy to edit Master text styles levelsocial media policy Second Review Fourth level Fifth level Third level Ask questions before you act Partner with Management, HR, Communications BU, Legal Procedures Understand your reporting responsibilities when compromised social media incidents happen Training Review social media training annually https://www.searchenginejournal.com/social-media-facts/258533/#close L3HARRIS Social Media and the Workplace 5

Social Media - Embrace Platforms Cautiously Click Privacy Configuration to edit Master text styles levelprivacy settings Second Review Fourth level Fifth level Third level App updates can regress previous settings Control your narrative Report incidents to the vendor or service provider as soon as possible Participate responsibly Be a critical thinker Act and post within your Organization’s Policy Add employer disclaimer to your personal posts or articles https://www.searchenginejournal.com/social-media-facts/258533/#close L3HARRIS Social Media and the Workplace 6

Online Social Engineering HOW DOES YOUR ONLINE PRESENCE MAKE YOU A TARGET? WHO DO YOU WORK FOR? WHAT IS YOUR EDUCATION? WHAT IS YOUR EXPERTISE? WHAT IS YOUR FAVORITE ACTIVITY? WHAT SPORTS TEAM, TV SHOW, OR BOOK IS YOUR FAVORITE? WHERE DO YOU LIVE OR WHERE HAVE YOU LIVED? WHO DO SPEND TIME WITH? WHERE DO YOU LIKE TO GO? WHEN DO YOU GO THERE? L3HARRIS Social Media and the Workplace 7 7

Online Social Engineering (cont.) Social Engineering Activity, 8/16-8/24 2017 - LinkedIn Utilize a false account simulating a Foreign Intelligence Service (David Mak) “Stock” Photo Foreign Affiliation L3HARRIS Social Media and the Workplace 8 8

Online Social Engineering (cont.) Social Engineering Activity - LinkedIn Creating a false account simulating Foreign Intelligence Service (David Mak) Similar to an actual software company in Quebec (Nulogy) Obvious “red flag” L3HARRIS Social Media and the Workplace 9 9

Online Social Engineering (cont.) Timeline of Events – 8/16 - Created false account on Connected with 25 Canadian LinkedIn members (random persons in the software development field) – 8/21 - Initiated connection requests with employees – 20 Cleared Employees – 10 Uncleared Employees – 8/24 – Terminated Social Engineering Activity (four business days) – Made five connections; three uncleared and two cleared (TS/SCI) – Nine views of the profile by personnel – Received one report of the activity (by a cleared CPSO) Takeaways – 17% Accepted Connection – Almost 33% viewed the profile and did not report it – Other than security personnel, zero reporting L3HARRIS Social Media and the Workplace 10 10

Social Media – Develop a Professional Brand Click Whytoisedit Branding Master Important text styles Second level Third level Fourth level Fifth level Harder to highjack an active profile People in your network know your voice Establish and Protect your reputation https://www.LinkedIn.com L3HARRIS Social Media and the Workplace 11

Social Media Click to edit Master text styles Second level Third level Fourth level Fifth level Don’t Freak Out .QUESTIONS https://www.searchenginejournal.com/social-media-facts/258533/#close L3HARRIS Social Media and the Workplace 12