Small and medium-sized businesses are concerned that their employees’ use of social media is a potential security risk, according to a new survey by the Cyber Readiness Institute . Specifically, the survey , which surveyed 400 small and medium-sized business owners and approximately 1,060 U.S. employees , found that 56% of owners believe that their employees’ use of social media could fuel malicious activity and attacks .
Despite their fears, however, 82% of employers reported allowing their employees to use personal devices to access work email or other data , while 67% of them allow their employees to use social media apps , such as Facebook and Twitter , on work devices.
While 56% of employees said they have social media apps on devices they use for work, only 30% had been given advice and guidance on how to use the apps on those devices. Additionally, 22% of employees admitted to ignoring or bypassing security guidelines issued by their company.
Kiersten Todt, CEO of the Cyber Readiness Institute, said that small business owners are well aware of the cybersecurity risks associated with mixing personal and work data and activities on the same device. Todt added that small businesses should have policies in place to mitigate and address these risks. Additionally, 4 in 5 employers allow employees to use personal devices for work, and only half have policies regarding what apps can and cannot be used on the devices.
Notably, over 40% of business owners said that more than 75% of their employees have social media apps on their work devices. Facebook was the most popular app used by employees on their work devices, with 50% of respondents saying they used it. Additionally, nearly 60% said their company has not issued new guidelines regarding the use of social media apps on work devices, which is even more necessary after the outbreak of the COVID-19 that has affected countries around the world and led to, among other things, remote work.
Finally, according to the survey, 36% of employers are considering adding new policies regarding social media applications or modifying existing policies for employees who must work remotely.
