Do you allow web-based personal communication apps such as WhatsApp or Telegram on your company devices? If so, what are your considerations? Additionally, what security controls do you have in place to prevent data leakage?

Security & GRC
639 viewscircle icon2 Comments
Sort by:
IT Manager in Banking2 years ago

No, we don't allow employees to share the information on WhatsApp, Telegram, or other public media platforms. the employees have used Microsoft teams for chatting, meetings, networking and internal communication. 

Lightbulb on1
Information Security Manager in Transportation2 years ago

1- Employee awareness training to educate and alert employees about potential threats and unintentional actions.

2- Implementation of high-level policies accompanied by clear disciplinary actions.

3- Utilization of a well-configured and effectively utilized DLP.

4- Alternatively, avois risk by prohibiting such activities altogether.

Content you might like

Why do you think there are so few mature AI-driven autonomous pentesting solutions on the market, and why does this topic seem to generate more hype than in-depth technical discussion?

Read More Comments

How long does your organization retain original systems logs used to filter SOX-related actions into a system that requires review of the logs and retains the filtered logs for seven years? Does your organization consider those original system logs records subject to record retention requirements, or supporting information used to create the SOX records?

90 Days12%

365 Days41%

3 years29%

5 years9%

7 years9%

Other (share in the comments)

View Results

Which pitfalls—model bias, false positives/negatives, data quality, regulatory constraints—often impede AI-based security tools, and how can they be mitigated in a financial-services context?

Read More Comments

Are short term bans of the use of GenAI applications and tools (such as ChatGPT) a good idea for end users in most organizations? For context see this article on the State of Maine Government's directive before you vote: https://www.govtech.com/artificial-intelligence/chatgpt-generative-ai-gets-6-month-ban-in-maine-government

Yes - Maine did the right thing. There are too many security risks with free versions of these tools. Not enough copyright or privacy protections of data.32%

No, but.... - You must have good security and privacy policies in place for ChatGPT (and other GenAI apps). My organization has policies and meaningful ways to enforce those policies and procedures for staff.45%

No - Bans simply don't work. Even without policies, this action hurts innovation and sends the wrong message to staff and the world about our organization.18%

I'm not sure. This action by Maine makes me think. Let me get back to you in a few weeks (or months).4%

View Results

Which key pentesting capability do current AI-driven vendor solutions most fail to cover?