Everyday employees are posting tons of information on to social media that can breach your security. Here is a run-down of some innocent posts that can cost your business a loss.
Safe Security
In every great heist movie, the crooks find out what type of safe the business/place has. It is just as important as finding out guard or employee schedules. It is a must for the safe cracker so that he can get the right tools and equipment.
Oftentimes, he can easily just scroll Facebook and find people posting about their job. It is usually an innocent picture of their manager in the office and in the background is an awesome picture of the safe. With this easily obtained information, he knows the location and the type of safe.
I personally always get a laugh when I see locations have a box store safe. In most states anyone can go on the state’s alcohol bureau website and see how much liquor a particular bar is selling to select the best target. But there is a super easy solution! Ensure no pictures of the back/cash office are allowed! And while you’re at it, ensure your safe is located in a secure location with access limited only to those who require it.
Access Cards and Key Security
Scenario two from every great heist movie: the crooks always try to get an employee access badge or a copy of the key. They have all sorts of elaborate ways of getting them in the movies. They might have an expert pickpocket or some intricate plan to get the credentials. Or they can just look on Facebook and find plenty of pictures of keys and badges. The best is when it is a picture of an access card that you can zoom in on the string of numbers. That is all that is needed to make a clone.
The same goes with a picture of a key. There are websites that will cut you a key from a picture and mail it directly to you. But there is another easy solution! Tell employees that access cards and keys are to be treated like their own credit card number. Ensure that access cards and keys are not visible in social media posts.
Additional Tips
So, are you or your employees guilty of posting some of the above? If so, here are some more easily implemented suggestions:
- Switch to a dual authentication reader for secured areas. These readers can be set up to require an access credential and a PIN number. The only requirement is that your employees do not leave a sticky note with their pin code on the card or somewhere where it can be seen by others.
- Implement a facial recognition integrated access control. These systems record video 5-10 seconds before a credential is presented and 5-10 seconds after to ensure the person attempting to access an area is who they say they are.
- Associate a cost to employees for keys or credentials issued out. If Karen in accounting knows that losing her badge could cost $50 to replace, she would keep up with it a little better. Same for Jimmy in sales. If he knows his lost key is going to cost him a couple of hundred dollars, he won’t let it out of his sight.
- Adopt some form of key control program. At the very least, everyone issued a key or access badge should be signing for it. If you have high security or restricted keys make sure they are numbered and always accounted for.
Companies must ensure that they are staying safe in the ever-evolving age of social media. Although some of these tips may seem common sense, you’d be surprised how many businesses and their employees are guilty of breaking these rules. By following these easy tips, you can ensure that you and your business are secure.
Guest Author
This article has been graciously provided by guest author Mike Foster. Mike Foster is a licensed security professional with 20 years of experience in the door security arena, having implemented over 15,000 IC Cores and hundreds of key management systems. Mike is currently a leading security solutions project manager for Rolland Solutions. Mike currently lives in Dallas with his wife and their pug named Princeton.