09-26-2012 Council Agenda - Laserfiche WebLink

Home Browse Search

comments from the public when they cone across discussions about the Air Force on social media sites .3 6. Security Governments are working to develop best practices to ensure the security of their data and technical infrastructure in light of the new uses, users, and technologies related to social media use. Some of the reviewed policies deal explicitly with security concerns for social media, while others are more general. For instance, the City of Hampton's policy simply points to existing IT security policies by stating, "Where appropriate, City IT security policies shall apply to all social networking sites and articles." Other policies target specific security concerns; two types generally found in the policies analyzed and discussed in the interviews were technical and behavioral concerns. The technology concerns addressed in the policies focused on password security, functionality, authentication of identity using public key infrastructures, and virus scans. Fifteen of the policies included specific requirements such as requiring users to maintain complex passwords. A few policies required a designated official to hold all username and passwords for social media accounts. Sample language outlining the technical concerns and processes to follow: Agency IT Administrators shall: 1. Limit Internet access Social Media web sites according to the agency's acceptable use policy, while allowing authorized Users to reach content necessary to fulfill the business requirements. Limitations may include:.... b. Allowing Internet access to Users who are specifically authorized. c, Preventing unnecessary functionality within Social Media web sites, such as instant messaging (IM) or file exchange. d. Minimizing and /or eliminating the addition of web links to other web sites, such as "friends ", to minimize the risk of exposing a government user to a link that leads to inappropriate or unauthorized material. 2. Enable technical risk mitigation controls to the extent possible. These controls may include: a. Filtering and monitoring of all Social Media web site content posted and /or viewed. b. Scanning any and all files exchanged with the Social Media web sites. State of California The Department of the Navy memo on social media specifically mentions following the Department of Defense's Public Key Infrastructure procedures and restricts the posting of classified information to protected sites only. Two policies detail how attachments should be scanned using anti -virus tooth before they can be posted on behalf of the government. 3 ht tp: / /www.wired.com /images_blogs /photos /uncategofized /2009 /01/06 /air_ orce_blog_char.jpg 10 79