Who controls your business’s official social media accounts? 1. Who controls your business’s official social media accounts?
One person, possibly on a personal email or phone number. The business owns them, but only one person has admin access. They are business-owned, with at least two trusted admins and business recovery contacts.
Is MFA turned on for everyone who can manage your official accounts? 2. Is MFA turned on for everyone who can manage your official accounts?
No, or we do not know. For some admins or some accounts. Yes, for every admin on every official account, and we check it regularly.
How would your business handle a fake page using your name? 3. How would your business handle a fake page using your name?
We would not know what to do, or we would argue publicly. We would report it, but there is no agreed approach or customer message. We have a short plan: save evidence, report via platform tools, warn on verified channels and guide affected customers to 1930.
When someone leaves or changes role, what happens to their social media access? 4. When someone leaves or changes role, what happens to their social media access?
Nothing specific. Access often stays. We remove access sometimes, but not always on time. Access and connected apps are reviewed on their last day as part of an exit checklist.
Is there a documented owner for the key control in this chapter? 5. Is there a documented owner for the key control in this chapter?
No / unknown Partially / informal Yes, documented and reviewed
Can the organisation provide current evidence that the control works? 6. Can the organisation provide current evidence that the control works?
No evidence Some evidence, not routinely checked Current evidence is reviewed
Are weaknesses tracked to an owner and target date? 7. Are weaknesses tracked to an owner and target date?
No consistent process Sometimes Yes, tracked to closure
Do employees know how to report a concern or incident? 8. Do employees know how to report a concern or incident?
No clear route Some employees know Clear route is communicated
Is this topic reviewed regularly and after significant changes? 9. Is this topic reviewed regularly and after significant changes?
Never / rarely Only after a problem Yes, with recorded review
See my result 0 of 9 answered