The InfoSec Blog

About Social Networking policy

Posted by antonaylward

LONDON - FEBRUARY 03: (FILE PHOTO)  In this ph...

Policy development is one of my areas of practice, so when a colleague on a mailing list asked about how to phrase policy to deal with the social networks (Facebook, Twitter, Myspace, etc.) and what the "best practices" are, I came out of my shell to reply.

(We'll skip over the oxymoron "best practices" since "Context is Everything".)

The phrase

"Use of corporate resources ..."

is a wonderful one to use to prefix just about any policy statement or justification. In one workshop on policy development that I ran someone pointed out that it applied to access to the company parking lot!

The issue here isn't "social networking", no matter how much the media and ZDNet would have you believe. It boils down to a few very clear and easy to enumerate issues: