Mapping Roles and Responsibilities for Social Media Risk Management

43
Who's on First: Managing Enterprise Social Media Risk

description

Social media has quickly proven to be a tremendous resource for marketing, human resources, support, and many other business functions. However, that same communications tool can also introduce a significant amount of risk to an organization – risk to corporate compliance, from security threats, employee error and abuse, and much more. View the slides from Alan Webber, Principal at Asymmetric Insights, John Hair, Director, IT Advisory for KPMG, Chris Walker, Partner at Connect Marketing, and Devin Redmond, Co-Founder & CEO of Nexgate and their webcast on organizational roles and responsibilities in social risk management. Our expert panel shared their insights into how to define and manage enterprise social risk across your social media marketing teams. You can watch a recording of the webcast here: http://nexgate.com/resources/webcast-roles-and-responsibilities-for-social-risk-management/

Transcript of Mapping Roles and Responsibilities for Social Media Risk Management

Page 1: Mapping Roles and Responsibilities for Social Media Risk Management

Who's on First: Managing Enterprise Social Media Risk

Page 2: Mapping Roles and Responsibilities for Social Media Risk Management

Today’s Speakers

Alan WebberPrincipal, Asymmetric Insights

John HairDirector, IT Advisory, KPMG

Chris WalkerPartner, Connect Marketing

Devin RedmondCo-Founder & CEO, Nexgate

Page 3: Mapping Roles and Responsibilities for Social Media Risk Management

Principal, Asymmetric InsightsAlan Webber

Page 4: Mapping Roles and Responsibilities for Social Media Risk Management

Social media platforms have proliferated

Page 5: Mapping Roles and Responsibilities for Social Media Risk Management

As has brand adoption of the platforms

Page 6: Mapping Roles and Responsibilities for Social Media Risk Management

Social media has become integrated into our lives and businesses

Page 7: Mapping Roles and Responsibilities for Social Media Risk Management

With this proliferation has come increased risk

Page 8: Mapping Roles and Responsibilities for Social Media Risk Management

Who is in charge?

Page 9: Mapping Roles and Responsibilities for Social Media Risk Management

Roles in social media risk management

Social Media Risk

Management

Marketing & Communication

s

Information Technology

Social Media Tech

Social Media Marketing

Community Management &

Customer Service

Legal & Audit

Human Resources

Page 10: Mapping Roles and Responsibilities for Social Media Risk Management

Roles in social media risk management

Social Media Risk

Management

Marketing & Communication

s

Information Technology

Social Media Tech

Social Media Marketing

Community Management &

Customer Service

Legal & Audit

Human Resources

Page 11: Mapping Roles and Responsibilities for Social Media Risk Management

Roles in social media risk management

• Chief Marketing Officer• VP of Marketing• VP of Corporate Communications

Titles

• StrategicRole Level

• Executive Sponsor• Accountable to Board for success or failure

Social Media Responsibilities

• Brand/image protection• Reputation management• Regulatory compliance

Risk Concerns

Marketing and Communications Management

Page 12: Mapping Roles and Responsibilities for Social Media Risk Management

Roles in social media risk management

• Chief Information Officer• Chief Information Security OfficerTitles

• StrategicRole Level

• Executive Co-Sponsor• Accountable to Board for privacy, IP,

company information, IT security

Social Media Responsibilities

• Data Privacy• Security• Regulatory compliance

Risk Concerns

Information Technology

Page 13: Mapping Roles and Responsibilities for Social Media Risk Management

Roles in social media risk management

• Chief Technology Officer• Digital Security Manager• Enterprise Architect

Titles

• Strategic to tacticalRole Level

• Deployment of standardized applications• Account management• Training and policy enforcement

Social Media Responsibilities

• Account security• Standardization of risk mitigation efforts• Channel and app proliferation

Risk Concerns

Social Media Technology

Page 14: Mapping Roles and Responsibilities for Social Media Risk Management

Roles in social media risk management

• Chief Legal Officer• Chief Compliance Officer• Chief Risk Officer

Titles

• Strategic to operationalRole Level

• Regulatory and legal compliance• Policy and governance• Audit of accounts

Social Media Responsibilities

• Regulatory compliance• Brand hijacking• Erosion of brand reputation

Risk Concerns

Legal and Audit

Page 15: Mapping Roles and Responsibilities for Social Media Risk Management

Making It Real

Scenarios & Case Studies

Page 16: Mapping Roles and Responsibilities for Social Media Risk Management

Five common scenarios

Account Hack

Spam and Malware

Tracking Accounts

Release of Customer

Data

Compliance Violations

Page 17: Mapping Roles and Responsibilities for Social Media Risk Management

Use case – Unauthorized Accounts

Photo by thenails / CC BY

Page 18: Mapping Roles and Responsibilities for Social Media Risk Management

Use case – Inappropriate Comments

Photo by Bev Goodwin / CC BY Flickr

Page 19: Mapping Roles and Responsibilities for Social Media Risk Management

Next Steps

Page 20: Mapping Roles and Responsibilities for Social Media Risk Management

Next Steps

1. Define a governance structure

Page 21: Mapping Roles and Responsibilities for Social Media Risk Management

Next Steps

1. Define a governance structure

2. Put a social media policy in place

Page 22: Mapping Roles and Responsibilities for Social Media Risk Management

Next Steps

1. Define a governance structure

2. Put a social media policy in place

3. Select technologies that will support your organization

Page 23: Mapping Roles and Responsibilities for Social Media Risk Management

Next Steps

1. Define a governance structure

2. Put a social media policy in place

3. Select technologies that will support your organization

4. Test your organization

Page 24: Mapping Roles and Responsibilities for Social Media Risk Management

Partner, Connect MarketingChris Walker

Page 25: Mapping Roles and Responsibilities for Social Media Risk Management

AGENCY REPORTING STRUCTURE

Page 26: Mapping Roles and Responsibilities for Social Media Risk Management

AN AGENCY’S ROLE

Page 27: Mapping Roles and Responsibilities for Social Media Risk Management

PRIMARY OBJECTIVES

• Agencies are often engaged to:

– Enhance marketing efforts

– Foster customer engagement

– Build community

– Improve customer support

– Drive leads and sales

– Generate content

Page 28: Mapping Roles and Responsibilities for Social Media Risk Management

RISK MANAGEMENT OBJECTIVES

• Agencies should also be engaged to:

– Set up or refine infrastructure

– Protect company reputation

– Monitor for compliance

– Archive social content

– Issues management and crisis prevention

– Provide third-party experience and views

Page 29: Mapping Roles and Responsibilities for Social Media Risk Management

ASK YOUR AGENCY

• How do you:

– Handle governance and compliance issues?

– Become educated on applicable laws, policies and regulations?

– Monitor and report social media policy violations?

– Archive social communications? How long?

– Work within set style guidelines?

– Manage issues to prevent crises?

Page 30: Mapping Roles and Responsibilities for Social Media Risk Management

DEALING WITH ISSUES

• Astroturfing

• Newsjacking

• SPAM

• Inappropriate content posting

• Compromised accounts

Page 31: Mapping Roles and Responsibilities for Social Media Risk Management

Director, IT Advisory, KPMGJohn Hair

Page 32: Mapping Roles and Responsibilities for Social Media Risk Management

© 2013 KPMG LLP, a Delaware limited liability partnership and the U.S. member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved. 37898WDC

32

Real Life Social Media Missteps –SPECIFIC COMPANY NAMES ARE NOT IMPORTANT

Tweeting personal opinions via the corporate Twitter handle on personal smart phone

Getting into an endless argument with a critic on the company Facebook page

Releasing a “hip” YouTube video with no meaningful vetting beyond the creators

Disclosing key financial or operational results on Google+ pages

Updating personal LinkedIn profiles and inadvertently disclosing company IP

Leaving an old Pinterest pin board active well after the campaign ended

Taking too much time to address negative commentary that’s going viral

Page 33: Mapping Roles and Responsibilities for Social Media Risk Management

© 2013 KPMG LLP, a Delaware limited liability partnership and the U.S. member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved. 37898WDC

33

The Board of Directors is getting involved – MOST DON’T GET IT AND THAT MAKES THEM NERVOUS

Research from KPMG’s Audit Committee Institute notes that Board of Directors (BoD) have identified technology change and innovation as one of their top priorities

Use of social media is a primary area of technology change and innovation that BoDs are focused on

BoDs aren’t asking if the company uses Social Media, but how the company uses it and how it does so responsibly

Many BoDs are creating a technology committees within the BoD and are actively seeking tech-savvy directors within

Page 34: Mapping Roles and Responsibilities for Social Media Risk Management

© 2013 KPMG LLP, a Delaware limited liability partnership and the U.S. member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved. 37898WDC

34

What does being “Responsibly Social” look like?

Guidelines

Metrics

Oversight Technology

Third Parties

Finance

Page 35: Mapping Roles and Responsibilities for Social Media Risk Management

© 2013 KPMG LLP, a Delaware limited liability partnership and the U.S. member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved. 37898WDC

35

Continuous maintenance of corporate policy and

supporting guidelines and messaging

Guidelines

What does being “Responsibly Social” look like?

Page 36: Mapping Roles and Responsibilities for Social Media Risk Management

© 2013 KPMG LLP, a Delaware limited liability partnership and the U.S. member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved. 37898WDC

36

Orchestration of strategic input from Legal,

Regulatory Compliance, and other corporate

oversight groups

Oversight

What does being “Responsibly Social” look like?

Page 37: Mapping Roles and Responsibilities for Social Media Risk Management

© 2013 KPMG LLP, a Delaware limited liability partnership and the U.S. member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved. 37898WDC

37

Consideration of the key roles played in social media by creative and

technical agencies

Third Parties

What does being “Responsibly Social” look like?

Page 38: Mapping Roles and Responsibilities for Social Media Risk Management

Co-Founder & CEODevin Redmond

Page 39: Mapping Roles and Responsibilities for Social Media Risk Management

What to do…

① Do something! Avoidance and procrastination are not safe– If you manage social media for your company, be proactive

② Start simply by getting visibility– Do an audit of accounts with a consultancy, agency, technology, etc.

③ Use audit findings to fuel your R&R planning and assignment– Lots of / fake accounts = work with legal, account owners, tools,

etc. to set up and execute policies with ongoing tracking – Spam = work with community managers, legal, tools, etc. to enact

policies

Page 40: Mapping Roles and Responsibilities for Social Media Risk Management

Submit your question in the chat box

Panel Discussion & Q&A

Page 42: Mapping Roles and Responsibilities for Social Media Risk Management

Mapping Organizational Roles & Responsibilities for Social Media RiskHow to Define and Implement Organizational Enterprise Social Media Risk Management

Roles with an interest in social media risk management,

Social media risk management responsibilities,

Roles and responsibilities in common risk scenarios,

Budgeting and procurement for controls, and

Steps to mitigate risk to your social media programs.

Download the Whitepaper

Get the paper at http://nx.gt/18chLBi

Page 43: Mapping Roles and Responsibilities for Social Media Risk Management