May 25, 2016 By Larry Loeb 2 min read

Smarsh has released its “2016 Electronic Communications Compliance Survey Report,” which has some surprising conclusions — especially regarding social media compliance.

Major Issues Surrounding Compliance

The study polled 221 financial services professionals that had direct compliance supervision responsibilities. Respondents said that policy, enforcement and retention gaps remain high. This means that firms will be vulnerable to undetected fraud, errors and regulatory penalties, the survey noted.

The professionals responding found that current supervision practices aren’t sufficiently addressing the ongoing evolution of communication in the financial services industry. Most agreed that firms have an immediate need to rethink their approach to the retention and oversight of electronic communications amid a demanding regulatory environment.

Social Media Compliance Officers Are on the Hook

Risks in compliance are everywhere. Supervision of new communication types poses a big challenge: Most firms have been overwhelmed by the sheer volume of email they must review to meet requirements. Not only that, but the resources available to address this issue are growing slowly, if at all.

Communication “outside the compliance perimeter” can be a significant vulnerability. In fact, 48 percent of respondents thought social media was their primary compliance risk. Supervisors had little or no confidence that they could prevent users from using these social media platforms, even if they were forbidden in the workplace.

Messaging Apps Are a Problem

Messaging apps were also an area of great concern to respondents since their use has not been demarcated by the regulators. Without this formal guidance, the report notes, “A full 39 percent of those who allow but don’t archive these messages are waiting for industry regulators to enforce guidance before they will begin archiving text messages.”

Firms are struggling to find viable solutions for these social programs, particularly since existing policies don’t seem to be working. “If procedures designed to identify risk in email are ineffective and waste time, extending those same procedures to additional content only exacerbates those results,” Smarsh said in its report.

“There is a need to rethink the traditional approach to communications supervision, especially when considering finite resources and the growing strategic role of compliance in organizational risk management.”

Changing the process of regulatory compliance has been exacerbated by the rise of mobility in the workplace, along with the introduction of new and unregulated messaging platforms. Stricter control and organized archiving of employee communications in all forms will be needed in days to come.

More from

Cyberattack on American Water: A warning to critical infrastructure

3 min read - American Water, the largest publicly traded United States water and wastewater utility, recently experienced a cybersecurity incident that forced the company to disconnect key systems, including its customer billing platform. As the company’s investigation continues, there are growing concerns about the vulnerabilities that persist in the water sector, which has increasingly become a target for cyberattacks. The breach is a stark reminder of the critical infrastructure risks that have long plagued the industry. While the water utility has confirmed that…

What’s behind unchecked CVE proliferation, and what to do about it

4 min read - The volume of Common Vulnerabilities and Exposures (CVEs) has reached staggering levels, placing immense pressure on organizations' cyber defenses. According to SecurityScorecard, there were 29,000 vulnerabilities recorded in 2023, and by mid-2024, nearly 27,500 had already been identified.Meanwhile, Coalition's 2024 Cyber Threat Index forecasts that the total number of CVEs for 2024 will hit 34,888—a 25% increase compared to the previous year. This upward trend presents a significant challenge for organizations trying to manage vulnerabilities and mitigate potential exploits.What’s behind…

Quishing: A growing threat hiding in plain sight

4 min read - Our mobile devices go everywhere we go, and we can use them for almost anything. For businesses, the accessibility of mobile devices has also made it easier to create more interactive ways to introduce new products and services while improving user experiences across different industries. Quick-response (QR) codes are a good example of this in action and help mobile devices quickly navigate to web pages or install new software by simply scanning an image.However, legitimate organizations aren’t the only ones…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today