07-08-2015 Council Packet - Laserfiche WebLink

Home Browse Search

The behavioral security concerns refer to those threats that result From employees' intentional or inadvertent actions when engaging with social media sites and tools, The Guidelines forsecure Use of Social Media by Federal Deportment's and Agenclesby the Federal CIO Council discussed the two major threats that rely an certain types of behaviors by users—spearph/shiny and socia! engineering. For example, employees may inadvertently post information about themselves or the agency an social media sites, which attackers then use to manipulate users, A related Concern is the inadvertent posting of citizens' personal and protected information by agency employees, While these concerns are not new, many of the reviewed policies mentioned the need to protect confidential information that is personail' identifiable or could endanger the agency mission, 7, Legal Issues The use of social media tools raises the issue for many agencies about how to ensure that their employees are abiding by all existing laws and regulations, Some policies take a general approach to legal issues, using generic text that requires all employees to adhere to all applicable laws end regulations without actually specifying which laws and regulations are applicable, Others paint to specific areas of law such as privacy, freedom of speech, freedom of information, public records management, public disclosure, and accessibility, A number of policies include language outlining records management and retention schedules semple disclaimer for comments tieing for content pasted to social media sites, The treated as public i eeords policies that address this issue focus on 'lasts end comments to and from me, in retaining social media records, but a few connection with the transaction of public include language related to the removal of business, is subject to the North Carolina records (for example, see bullet 6 in the City of Public Records Law and may be disclosed Hampton, Virginia policy below), The State of to third parties.' Massachusetts highlights the transitory nature W State of North Caroling of records in its guidelines on Twitter and provides instructions on how to download Tweets from Twitter to prevent loss of content, Some policies proactively address potential legal issues by requiring the use of various disclaimers an social media sites, One example of a standard disclaimer is for use by employees when engaging in social media activities and is intended to detach the opinions and actions of individual employees from their employer. For example, The City of Hampton, Virginia directs its employees who choose to engage citizens on social media sites on behalf of the City to "Make it clear that you are speaking for yourself and not en behalf of the City of Hampton, If you publish content on any website outside of the City of Hampton and it has something to do with the work you do or subjects associated with the City, use a disclaimer such as this; 'The postings on this site are my own and don't necessarily represent the City's positions or opinions.' " Other standard disclaimers concern public records, external links, endorsements, copyright, privacy, and offensive bebavi or, 11