Differences

This shows you the differences between two versions of the page.

--- social_media [2019/08/04 16:02] – created neil
+++ social_media [2019/08/09 10:25] – neil
@@ Line 1: / Line 1: @@
 =====Securing your firm's social media accounts =====
-Who can post on your firm’s account?
+====Key points: ====
+  * [[social_media#Enable two-factor authentication|Enable two-factor authentication]]
+  * [[social_media#Delegate access; do not share your password|Delegate access; do not share your password]]
+  * [[social_media#Be careful about what you post|Be careful about what you post]]
+  * [[social_media#Decide if you want to auto-delete posts|Decide if you want to auto-delete posts]]
-Giving access to someone versus giving out your firm’s password: they can lock you out
+====Enable two-factor authentication ====
+Enable [[two-factor_authentication|two-factor authentication]] on all your firm's accounts.
+That way, if your username and password are compromised, you should still be protected against someone being able to post to your firm's account, or changing the settings on your account.
+====Delegate access; do not share your password====
+Do not share the password to your firm's social media accounts. If you give someone your password, they can lock you out.
+If you want someone to post to the firm's account, delegate access to them, in a way which you can readily revoke.
+If you cannot do this directly through the platform's own systems, you'll need third party software or a service to do this (which comes with its own risks).
+====Be careful about what you post ====
+Aside from regulatory or ethical rules, think carefully before posting on your firm's behalf.
+Does the photo of the office give away information useful to an attacker?
+Does the photo of you all at an awayday or retreat suggest that your premises are unoccupied?
 Being careful what you post: do you really want to announce when you are away?
+====Decide if you want to auto-delete posts ====
+Once something is posted online, you lose control of it. You cannot stop someone taking a screenshot and circulating it, and you cannot rule out a system caching everything.
+You may be comfortable with this, but still not want an everlasting history of posts to be showing on your account.
+For Twitter, [[https://micahflee.com/2019/06/semiphemeral-automatically-delete-your-old-tweets-except-for-the-ones-you-want-to-keep/|Semiphemeral]] ([[securing_your_devices#Only install software / apps from trusted sources|not from an app store]]) can automatically delete tweets older than whatever age you specify.