This document provides best practices for social media security and avoiding failures for government agencies. It recommends using two-factor authentication, unique passwords for each account, and password managers. Agencies should have backup admin access and plans for account hacking. URLs should be shortened safely and mobile devices secured with passcodes. Impersonation of officials or use of logos without disclaimers should be avoided. Contact information is provided for social media security resources.
1 of 9
Download to read offline
More Related Content
GSMCON Presentation on Social Media Security
1. City Managers Office
Smart Govies learn from their own
mistakes, wise Govies learn from
others mistakes.
~ #GSMCON
2. City Managers Office
SOCIAL MEDIA SECURITY
Use Two Factor (or Two Step)
Authentication Wherever Possible
Avoid Re-Using Passwords Among
Government Social Media Accounts
(Limit Exposure)
Use passwords with 8+ Characters -
Upper/Lower Case, Numbers, Symbols
3. City Managers Office
SOCIAL MEDIA SECURITY
Use LastPass or 1Password to Manage
Your Passwords (Personal, Professional)
Encourage Agency Employees Not to
Mix Personal and Professional Account
Passwords
Access Accounts from PCs, Laptops with
Updated Security (Firewall, Malware
Protection)
4. City Managers Office
MORE SECURITY BEST PRACTICES
Ensure at Least Two People Have Full
Admin Privileges (Evaluate Roles, Interns)
Use Passcode on your Mobile Device
(Shortest Setting Tolerable)
Use Trusted URL Shorteners such as bit.ly
or ow.ly
5. City Managers Office
MORE SECURITY BEST PRACTICES
Have a Plan for Hacking & Recovery
(Hacked, Will Be Hacked or)
Acknowledge Hack, Apologize, Archive
Posts and Remove Them
Consider Services Such as CloudFlare for
Your Websites (Ferguson, Madison,
Baltimore)
6. City Managers Office
AVOIDING SOCIAL MEDIA #FAIL
Impersonation vs Parody
(Using City Logo or Official Photo, No
Disclaimer)
Dealing with Parody Accounts, Abuse
(https://support.twitter.com/forms/impersonation)
May Want to Add Official Accounts to
Clarify or for Safekeeping
7. City Managers Office
AVOIDING SOCIAL MEDIA #FAIL
Secure Accounts for Emerging Platforms
(Instagram, SnapChat, etc.)
Attain Verified Status on Twitter
bit.ly/govverify
Facebook Working on Verified Status for
Local Gov. Agencies
8. City Managers Office
PEORIA, IL MAYOR TWITTER CASE
Impersonating a Public Official
Political Fallout
Damaged Credibility for Police
Federal Lawsuit Pending (1st & 4th
Amendment Violations)
9. City Managers Office
CONTACT INFO & RESOURCES
Luke Stowe
Digital Services Coordinator
City of Evanston, IL
@LukeStowe
lukestowe@gmail.com
GSA Readiness, Recovery, Response:
Social Media Cyber-Vandalism Toolkit
http://ow.ly/MikBt