Cybersecurity governance: An experiment with Brazilian bank employees on Facebook®
Marco Alexandre Terlizzi, Fernando de Souza Meirelles, Maria Alexandra Cunha · Academy of Management Proceedings · 2016
Financial organizations have been victims of sophisticated cyber attacks that take advantage of vulnerabilities created by employee misconduct. To understand whether the behavior of the employees of Brazilian financial organizations on online social networks (OSNs) can put the safety of individuals and companies at risk, an experiment was conducted with 500 employees of the largest Brazilian banks using Facebook®. It was observed that an anonymous individual using social engineering techniques can infiltrate an OSN used by employees of a financial organization and gain access to sensitive data exposed by its employees. Organizations should consider implementing guidelines related to the participation of its employees in OSNs and help them to develop content management capabilities for these media.