I read a short article in InvestmentNews today about a new social web site, LinkedFA, which is promoting itself as the "first and only Finra-compliant social networking site for financial professionals." I immediately thought to myself, how can a social networking site tout itself as Finra-compliant when Finra hasn't released its compliance guidelines yet? Finra postponed its introductory webinar until March.

 

Then I asked myself the larger question; why would financial professionals want a 'walled-garden' social media site in the first place? Doesn't that kind of defeat the objective? If you're a financial advisor, don't you want to be where your prospects are? A site dedicated to financial professionals is fine for connecting with people within your industry but it doesn't help you reach new customers.

 

Consider that there are currently more than 250 million Facebook users, 30 million Twitter users, and 25 million executives on LinkedIn. That's where the conversations are taking place. That's where you can reach customers and prospects.

 

Isn't it better to participate in this larger, open conversation taking place on the Web and develop best practices, with the help of technology, to make sure that those conversations are appropriately logged and accounted for? That's the best way to assure compliance, whether it's for Finra, the SEC, or some other regulatory agency.

 

Our financial services customers rely on FaceTime's IMAuditor and Unified Security Gateway to not only secure their networks, but to manage and log content for regulatory compliance.


That way they get the best of all worlds:


1) centralized control of online conversations stored on their own servers so they can be audited for compliance;

2) the ability to support any public social media site in a secure manner and 

3) the ability to allow their traders and other employees to use the application that is best suited to the job, whether that's Yahoo, Reuters, YellowJacket, Facebook or Twitter  - we don't mind, because, well, we support them all.

 

My team have put together a 30 minute briefing on "What you can stand to gain and lose with Social Media" - why not join them on January 27th at either 10 eastern or 10 pacific?

Last month we announced that Check Point Software Technologies had purchased our application database for use in their products. According to Check Point, this technology will "... provide businesses unparalleled granular control over application usage and enable security administrators to prevent threats associated with the use of certain Internet applications. Check Point will offer this new level of security controls as a Software Blade that will be available for all gateways." (read their release here: )

This deal reaffirms our leadership in the Web 2.0 security space. More importantly, it highlights the growing need for network solutions that provide visibility and control at the application level not just at the port & protocol level. Check Point sees this need and will use our database to provide application level control. Application level control will become the price of entry in the Firewall market.

But beyond visibility and control, what enterprises are asking for is "enablement".

  • How do I allow access to Facebook or LinkedIn and stay in compliance with FINRA or FERC or HIPAA or PCI or [insert your favorite regulation here]?
  • How do I allow access to YouTube videos but not the inappropriate stuff?
  • How do I allow access to blogs and wikis and webmail but ensure that confidential information if not getting posted?

Our customers realize they can't block access to the New Internet - they must enable it.

Which is why our mission statement reads "Secure & ENABLE the New Internet"


How are you and your organization enabling the new Internet?  What tools and applications do you need to secure to effectively enable your team?

Today's guest blogger is Eric Young.  Eric is FaceTime's Sr, Director of Field Services, and works with FaceTime customers to implement leading edge security and compliance solutions for Unified Communications and Web 2.0.  Eric's worldwide role gives him an insight into the global requirements of organizations implementing real time communications technologies to enable their businesses and works closely with our product team to ensure that FaceTime solutions remain at the forefront of the industry.

 

Yesterday's solution doesn't address today's issues.

 

I was onsite with a customer recently completing our fifth competitive replacement within the Fortune 400 in the past 6 months.  As the customer was detailing all of the requirements the previous solution did not satisfy, it made me wonder, how are other customers of these competitors feeling they are operating in a compliant fashion? 

 

If you, as a compliance officer or legal counsel, cannot make sense of a group chat conversation, cannot actually view the content of a blocked message, or can't see what folks are trying to post to a social networking site; how can you possibly defend your organization from SEC fines or from a lawsuit in a court of law? 

 

Security technologies evolve quickly, especially in the area of real-time communications - but the adoption of tools like Unified Communications, Instant Messaging and social media has grown exponentially - in many cases even without the knowledge of either IT or compliance.

 

Regulation and compliance changes too, with the times.  Most recently I've seen FINRA starting to address the issue of social media and issuing guidelines to member organizations and individuals on how usage should be treated. 

 

We all understand there is a big difference between "logging" and "being compliant" but knowing there are still some banks and other highly regulated companies using these legacy solutions that were designed for technology of a few years back, it begs the questions:  What are the minimum requirements for security and compliance for Unified Communications, Instant Messaging and Social Media?


And, what are you doing about dealing with emerging technology?

 

 

 

Damon Martin, takes a primary role in the development of technical and sales direction for SKT, a national Unified Communications consulting firm based in the central US.  Damon executes consulting practices and sales methodologies developed to ensure organizations realize the promise of Unified Communications.

Here, Damon discusses what's changed in the workplace - and what's becoming more relevant.

For many of us that have been consulting on Unified Communications for years it is hard to see the transformations when they are happening.  I remember talking to organizations about CTI when the idea that your computer could talk to your PBX was bleeding edge.    There has been an enormous amount of discussion in the past year about Unified Communications and its business impact.  An interesting transition for me has been that I don't find myself answering the question "What is Unified Communications?" anymore.  Instead, I find myself talking to organizations about what Web 2.0 and social networking mean to their business. The reality is that those questions are a natural progression of the dialog.  There is an inherent link between Facebook, Twitter, LinkedIn and other social networking tools and Unified Communications.


What is changing in the workplace?
There is awareness within today's workplaces that we have to find ways to become more productive.  The effects of today's economic environment and acceptance of the "new normal" have allowed us to see the workforce output that is expected for information workers at our companies.  That productivity is fueled by an increasing demand for a collaborative working culture.  There are several trends that are emerging in the new workplace:

  • Unwillingness to return to previous employment levels
  • Demands for higher productivity from information workers
  • Elimination of organizational layers
  • Increasing expectations for staff to take on a variety of roles and responsibilities

There is an interesting phenomenon of the new workforce; workers are finding an environment where they are being forced to collaborate with others at a much higher degree than was required previously.  This pressure has a logical conclusion that we are seeing play out in many organizations:

  1. Workers need to collaborate quickly and effectively and today's phones and email are not fast enough with most communications resulting in a voicemail or replies hours later.
  2. Workers have become accustomed to instant access to friends and family with text messages, Facebook, Twitter and instant messaging.

The result is that workers have a desire and need to use collaboration tools.  If we look at Unified Communications as a tool and explore its ability to add business value by driving collaboration, we can start to understand how social networking is an indication of the willingness of our teams to embrace Unified Communications and Collaboration.

Why is Web 2.0 relevant?
The key to the adoption of Unified Communications in the workplace is embracing it as a collaboration tool.  The question about whether people can use social networking tools to collaborate has been answered by the prolific growth of tools and social network sites.  The burden now is on solutions providers and vendors to help executives at companies understand how to leverage a Unified Communications platform to provide a tool-set.  Businesses need to continue growing productivity without returning to the staffing levels they that drove up costs.  We hear the question "how can we get our staff to embrace Unified Communications".  The key is to understand that they already have by tweeting feedback at a trade show or posting pictures of grandchildren on Facebook.  The vendors are doing a good job of showing demos of how Unified Communications works to IT departments.  In the interim, workers are finding ways to collaborate because they have to stay competitive and provide the output that is expected in today's workplace. 

Conclusion
It is time for the technology departments to accept that Unified Communications is not something that can be migrated to over time or tested for small user groups.  Businesses are not going to back away from demands for increasing productivity.  Workers have realized that collaborative communication is the way to make productivity sustainable.  We have to work to help organizations understand that Unified Communications and Collaboration (UCC) is where the consumer acceptance of social networking and the business software for Unified Communications come together. 


Damon originally posted this blog entry at the SKT Blog earlier in November 09.  You can follow Damon on Twitter.

I had an interesting meeting with a customer last week regarding the use of social networking. This is a large broker dealer with several thousand financial advisors across the country.


The IT department is getting pressure from the business users to allow the use of Facebook, LinkedIn and Twitter all of which they currently block. When I asked them why the business units wanted access to these sites, they gave me three reasons:

  1. The financial advisors are telling them that referrals they get through Facebook and LinkedIn tend to convert to clients at a much higher rate than any other channel. This resonated with me - at FaceTime we constantly remind our salespeople to leverage their social networks for prospecting. It is well know that human beings are tribal by nature and are more likely to respond to someone who is "connected" to them in someway - even when you have millions of connections!
  2. Their marketing group is focused on the 35-45 year old demographic since this is where people hit the peak of their earning power and start thinking about financial planning. Getting clients in their late thirties means you can hang on to them 20-30 years. Turns out that the over-35 demographic is the fastest growing user group at Facebook and the largest segment for both LinkedIn and Twitter.
  3. Finally, the company is finding that their ability to recruit at college campuses and MBA schools is enhanced by their Facebook and Twitter presence. As we all know, college kids live with these technologies and businesses that block access are seen as old school.


I am hearing similar reasons from other customers across all industry groups. Enterprises are recognizing the power of social networking to recruit new customers, stay in touch with existing customers and enhance communication with their employee base.


Of course there are several challenges that need to be overcome. In a survey FaceTime conducted in June of this year, organizations identified their top three concerns as content leakage, regulatory and corporate compliance and reputation damage.

"I am not worried about the guy who wants to steal information" the IT manager at a large services firm said to me. "I am worried about mistakes. People don't realize that competitors can also see your status update on LinkedIn and if you're talking about working on a particular project, you've just told the world." The inadvertent leakage of content is a common concern among the security managers I speak with.

On the compliance front, regulatory authorities are increasingly focusing on the use of these networks within regulated industries such as financial services, energy and healthcare. For example, FINRA, the Financial Industry Regulatory Authority, recently formed a Social Networking Task Force to look into the compliance challenges posed by social networking sites.

Finra CEO Rick Ketchum said, at the SIFMA Annual Meeting "Social networking sites such as Facebook or LinkedIn provide new ways to connect, inform and interact with customers... They also raise new regulatory challenges. For example, as currently designed they may not allow you to archive and maintain the communications on your own books and records."

 

Reputation damage is another concern for large enterprises. How do you track what employees and customers are saying about your company? The CIO of an electric utility company noted that they used Twitter to communicate information about outages and other emergencies to their customer base. "I worry that a disgruntled employee or customer could hijack our Twitter account and start spreading misinformation".

 

Another customer, a large bank that ran into some problems integrating an acquisition, talked about how customers were blasting the bank on Facebook and Twitter. "Because we block the use of these sites within our company, we were caught off-guard and didn't understand how we should respond to these comments." The IT manager noted. "Our marketing group is now formulating a strategy on how to leverage these platforms. We need to be more savvy about these channels."

 

Notwithstanding the challenges, it is clear that enterprises recognize the value of these sites and are motivated to overcome them. (Shamefaced sales pitch follows) FaceTime recently announced USG 3.0 which is designed to address these challenges and allow enterprises to leverage the benefits of social networking.

 

I would be interested in hearing your views on the use of social networking in your business. Do you agree with the above reasons? Are there other reasons?

It's not so long ago that I'd wonder what I did without my instant messaging client just to get through my working day. Not, you understand because I needed my latest fix of emoticon laden gossip with far flung friends, rather so that I could use Windows Live, Microsoft OCS, Lotus Sametime, Skype (yes I'm a serial IM'er) to get answers I needed from people who were online, rather than abandoning my question in a voicemail black hole.

 

My must have applications of choice now?  Twitter, Facebook and LinkedIn for starters.   And it appears I'm not the only one to join the social revolution.  FaceTime's June survey on social networking had over 87% of 1199 respondents using social networks, with 39% using a social network every day 

 

Now most of the folks I social network with are work related.  And my communications are during the working day.  And they respond in kind.  (So.. there's a Sherlock Holmes style deduction going on here) It's elementary, my dear Watson, that they must therefore be using social networks in the workplace.

 

And our survey agrees with that.  With a whopping 85% of respondents believing that their users are utilizing social networks from the corporate network.  We'd been somewhat surprised earlier this week, when Chris Boyd, our Director of Research uncovered a keylogger on the kids popular social networking site Neopets.  (Neopets (originally NeoPets) is a virtual pet website, based around the virtual pets that inhabit the virtual world of Neopia.)  

 

Chris found hackers targeting 12 year olds - and probably their more affluent parents.

 

Interestingly, sites such as Neopets are accessed in corporate environments too - FaceTime collects live traffic data from commercially deployed Unified Security Gateway appliances at more than 80 mid to large enterprises worldwide that have opted into this program, representing the daily Web-based activities of more than 100,000 corporate workers.

 

During the past week, these corporate workers have accessed 99 different virtual worlds from their work computers, and at least half of those are targeted at children. Perhaps, as Chris suggests, the kids are asking their parents to check on their Neopets at work or see if the latest friend request on Myspace has been approved?

 

I guess it's at this point in time that the corporate security folks start shaking their heads, and blocking access to social networks, updating those URL filters, tightening up the rules on the firewall.  You know the drill. 

 

Hold up.  Whoa.  Stop. 

31% of our survey respondents reported that Social Networking is critical to business - but must be secure and compliant, citing business benefits from better employee communications to improved marketing communications, more efficient recruiting and faster decision times through collaboration as the key benefits that social networking delivers.

 

But that's not all.  40% of our survey respondents derived their information about their employee social networking usage from URL filter logs.  The Web 2.0 applications and real time communications tools that make up the social networks and the internet that we use today are highly evasive, specifically designed to get around Web filtering, firewalls and other traditional security solutions using a variety of techniques like port crawling, tunneling and onion routing.  So the reality is probably that there is a lot more of this traffic that folks are just plain NOT SEEING, let alone managing.

 

I'll leave you with the thought that our web 2.0 world is no longer about blocking (even if your traditional URL filter could..) it's as we at FaceTime say (and our survey respondents agree with resoundingly)  - our new social order needs enabling, just make sure that it's done securely and compliantly.

 

As you've no doubt already heard, China recently announced plans mandating that all new computers sold in that country - including imported PCs - be delivered with pre-installed and pre-configured Web filtering technology beginning July 1, 2009.

 

Branded Green Dam-Youth Escort, China's foreign ministry spokesman defends the software claiming it's "aimed at blocking and filtering some unhealthy content, including pornography and violence" in an effort to protect children.

 

Putting aside the obvious discussions of censorship versus freedom of information, there's a fatal flaw in China's plan. Maybe we shouldn't tell them this, but Web filtering software alone doesn't block people from visiting Web sites and/or accessing Web applications.

 

Surprised? While the Internet used to be primarily about transmitting and accessing fairly static information via HTTP, FTP and e-mail it's now dominated by Web 2.0 applications such as instant messaging, P2P, VoIP and social networking sites. Savvy Internet users already use tools like anonymizers to mask their browsing habits, and real-time communications and Web 2.0 applications are highly evasive, specifically designed to get around Web filtering, firewalls and other traditional security solutions using a variety of techniques like port crawling, tunneling, onion routing, etc. - after all, their goal is to grow their communities and ensure users have the full experience.

 

From what I've read, neither China nor the media has considered or addressed this. I'm certainly not in favor of China to block access -- yes, FaceTime helps organizations control employee Web browsing and use of Web 2.0 applications, where visiting certain sites or using certain applications may be inappropriate in the workplace, put the company at risk or impact productivity -- but the Web sites you choose to visit and applications you use at home are for you to decide and parents to control.

 

The backlash over China's censorship plans is widespread, including nearly 20 trade groups representing technology companies calling on the Chinese government to reconsider the mandate contending that it "raises significant questions of security, privacy, system reliability, the free flow of information and user choice." There's also the California company that claims the mandated Internet filtering software contains stolen programming code. Other articles say the Chinese government has already backed down, retreating on its controversial new web filtering plan, saying the software can be uninstalled or switched off.

 

It's not clear yet how all of this will play out, but you have to ask, if China's mandate won't be effective, why do it at all?

As Jeff Chandler points out on the Performancing Blog, TinyURLs and the like have been a godsend for those active on Twitter, where you only have 140 characters to get your point across.

 

But clicking on an unknown link can make Internet-savvy users very nervous. It's good to know that most Secure Web Gateways will automatically resolve the TinyURL, bit.ly or other short URL redirects and determine their real destination - and discover and thwart any potential malware threat.

 

True, you still don't know exactly where you're going to end up, but from a security standpoint you can click away with confidence. As long as you've got a good gateway Web security solution in place, that is.

LarissaSarah_tiedye.JPGEvery self-respecting marketing person would dress up like a hippie for the sake of a marketing promotion, right? Well, Sarah Carter and I would, anyway.

 

You see, here at FaceTime, we're all about peace, love and free URL filtering. Okay, yes, it's a promotion we've been running for the past couple of months, but we really do feel the love when it comes to helping our customers manage their budgets by eliminating URL filtering renewal fees. Rumor has it there will be a group of protesters at the RSA Conference next week speaking out against those fees so be sure to stop by the FaceTime booth #2339 and check it out. And don't forget to wear your tie dye.

 

Seriously, all this commotion and protesting, but we really don't have anything against URL filtering. Everyone needs URL filtering, it's just that it's not enough when it comes to managing the New Internet. A much more granular level of application control is required when it comes to securing and managing Web 2.0 including social networking, multimedia, virtual worlds, VoIP ... and the list goes on.

 

So we've been having a lot of fun with our No URL Filtering Fees promotion in our Larissa and Sarah Show episodes. NetworkWorld even called our YouTube videos quirky. We'll take that as a compliment.

 

Peace out. 

 

A study released last week by the University of Melbourne's Department of Management and Marketing maintains that workers who engage in 'Workplace Internet Leisure Browsing' (WILB) are more productive than those who don't.

 

Well, that's good news for the 51 percent of workers who access social networking sites at least once a day while at work - not to mention the 50 percent that check their Facebook pages and the 69 percent that watch videos on YouTube several times a day, according to FaceTime's Collaborative Internet Survey published last fall.

 

 

Thumbnail image for piechart_FrequencyOf-SocialNetworkUseAtWork.jpg

The University's Dr. Brent Cocker says:

 

"Firms spend millions on software to block their employees from watching videos on YouTube, using social networking sites like Facebook or shopping online under the pretense that it costs millions in lost productivity, however that's not always the case."

 We couldn't agree more. The whole blocking strategy just doesn't seem to work in the real world.

 

At the same time, the results of the Melbourne study directly contrast some news that broke in the UK this last week - where students at Bournemouth University have been complaining that they can't get work done because other students are hogging University computers to use Facebook and Twitter.

 

Visibility into what employees (and students in this case in Bournemouth) are accessing, is crucial not just to an effective IT security approach, but also it seems to ensuring productivity. If you don't know that 69 percent of your workforce is watching YouTube, how will you know that's the cause of your bandwidth spikes? What if you could give them a bandwidth allotment for such activities, and when their quota is reached, its bye bye water skiing squirrel videos?

 

It sounds like the folks at Bournemouth Uni's IT team could do with not just controlling the bandwidth taken up by some students, but also the time that they're allowed to be on Facebook!

 

Watch this space for upcoming announcements about gaining greater visibility into what's really happening within corporate and organizational networks.

Find recent content on the main index or look in the archives to find all content.

Twitter Updates

Comment/Trackback Policy

This site supports an open comment policy. Rude, wasteful, off-topic, privacy-intruding or libelous comments will be deleted. Comments will remain open unless abused.