Social media, meet security. Security, meet social media

These days, that battle between digital marketing and security is showing itself most readily in the area of social media. Smart corporate marketers have learned that social media isn’t a fad or an option: it’s a necessity.

If you use social media, there’s no one in your organization (except maybe your legal group) who seems to have as different an outlook, purpose, approach, and goals as your security group. You need to be nimble, flexible, and on the cutting edge. 

And when you talk with security, it seems the word you most often hear is “no.”

Between your security and legal groups, getting approvals for new social media initiatives may make you feel like a suspect in “Law and Order,” having to explain and justify everything again and again.

On the flip side, smart people in charge of keeping your digital properties secure know that they face unprecedented threats.

Against that threat background, it can be frustrating to have to field constant requests to use tools that are untested, unproven, and unknown.

You need to be in control of your systems, your network, and your data. It’s hard enough to keep your environment secure against the threats you know; being asked to secure against unknowable threats is crazy, especially in an era of shrinking budgets.

Dealing with these requests may make you feel like you’re talking with an overenthusiastic teenager who’s so fixed on the cool thing they have no idea the potential consequences when something goes wrong.

I understand the gap that separates these two sides because I’ve been on both sides. I ran computer networks and was in charge of securing them. I’ve said “no” plenty of times to requests because I felt they weren’t secure.

I’ve worked in crisis communications and PR. I’ve made requests for social media channels and had them denied because they don’t meet security policy.

I can say the marketers are right: social media is as important to business now as the telephone. And I can say the security folks are right: the technology is young, not well understood, in constant flux, and is harder to secure than known technologies.

Both groups serve equally important but different functions in the company. When an impasse arises around social media, the only way forward is for both sides to first understand each other’s needs and requirements.

And then, take that understanding, collaborate, and move forward in a way that satisfies as much of everyone’s needs and requirements as possible in service to the shared strategic direction of the company.

What are you thinking?

To understand what’s driving this frenzy around social media, it’s important to understand that communications have been undergoing the most profound shift since the development of the printing press.

The changes began with the broad use of the Internet in the 1990s and have been accelerating exponentially ever since. In particular, the recent growth of social media, most especially Facebook, Twitter, and YouTube, has overturned all the old rules.

People in marketing and communications in 1987 would reach their customers in much the same way as they did in 1957. But in 2023, these same people don’t reach their customers in the same way as they did in 2009.

Communication has not only changed drastically, it’s showing no signs that it’s going to stop changing.

Current technology trends and an unquenchable thirst for novelty among consumers mean that from a digital marketing point of view, the most effective communication channels are often the newest. 

Attacks are growing in sophistication and number; even major security companies and governments can’t successfully defend against these attacks these days. Hari Ravichandran talks more about those threats and possible solutions.

The only good thing about the current threat environment for security folks is job security.

It’s an axiom in security that you can only secure that which you can understand. It’s also the nature of new technology that it’s not known, certainly not to a level most security people are comfortable with.

This is the crucial point where the needs of marketing and security collide. Marketing has a need to use new technologies because they’re new. Security can’t comfortably use these technologies precisely because they’re new. 

And from a security point of view, introducing new technologies like this against the most dangerous threat environment in history is a recipe for disaster.

How can a security officer feel confident that marketing’s new Pinterest presence won’t be hijacked and used to serve up pornography and malware? If the risk is too great, they’re going to say no.

And that’s when we come to the impasse. Moving forward together

That doesn’t have to be the end of the story, though.

Plenty of major corporations have embraced leading-edge social media strategies without disaster. A look at Facebook, Twitter, YouTube, and now even Pinterest shows plenty of success stories. The question isn’t “can it be done,” it’s “how can it be done.”

The key to effective, safe (or more accurately, acceptably safe), leading-edge social media for corporations is to view marketing and security both as partners and agents of checks and balances.

A good security person will tell you there’s no such thing as being absolutely secure: part of the process for them is determining what risk is acceptable and accepting that risk.

A good marketing person should be able to come up with creative solutions to work around resource constraints: they never have unlimited budgets, after all.

Both sides should be able to function successfully without getting everything they want so long as they get some of what they want.

Finding the right mix of each side getting some, but not all, of what they want happens by bringing people together from both sides who understand some of the points of view and needs of the other side.

Once together, they should work through a process of understanding the marketing side’s business needs and the security side’s risk assessment and then make a determination of whether to accept the risk associated with meeting that needs or not.

And the variety of third-party platforms we have to deal with is not making it easier. Quickbooks, Hootsuite (or other social media management platforms), and PayPal, to name a few. They all come with security solutions and issues of their own.

In those instances where, despite their best efforts, they can’t resolve the impasse, the issue should be taken to a senior decision-maker with authority over both parts of the business.

They then can then make the final decision of which is more important: the needs of marketing or the needs of security.

Companies that have embraced close ties like this between marketing and security will find over time; there will be fewer impasses.

In fact, over time, the ties between those two sides can sometimes grow to be strong enough that people pass from one side to the other to the benefit of the company.

A company that can quickly bring security expertise to bear on new technologies can deploy them more quickly. And as we’ve seen, that is squarely in the realm of what marketing needs to succeed these days.

Have any thoughts on this? Drop us a line below in the comments, or carry the discussion to our Twitter or Facebook.

Editors’ Recommendations:

• HIX.AI: a comprehensive review of the all-in-one AI Writing Copilot
• The art of growing your social media following
• Creating a social media marketing growth strategy
• Building a strong Instagram following: how to get more followers

Disclosure: This is a sponsored post. However, our opinions, reviews, and other editorial content are not influenced by the sponsorship and remain objective.