Smarsh has released its “2016 Electronic Communications Compliance Survey Report,” which has some surprising conclusions — especially regarding social media compliance.

Major Issues Surrounding Compliance

The study polled 221 financial services professionals that had direct compliance supervision responsibilities. Respondents said that policy, enforcement and retention gaps remain high. This means that firms will be vulnerable to undetected fraud, errors and regulatory penalties, the survey noted.

The professionals responding found that current supervision practices aren’t sufficiently addressing the ongoing evolution of communication in the financial services industry. Most agreed that firms have an immediate need to rethink their approach to the retention and oversight of electronic communications amid a demanding regulatory environment.

Social Media Compliance Officers Are on the Hook

Risks in compliance are everywhere. Supervision of new communication types poses a big challenge: Most firms have been overwhelmed by the sheer volume of email they must review to meet requirements. Not only that, but the resources available to address this issue are growing slowly, if at all.

Communication “outside the compliance perimeter” can be a significant vulnerability. In fact, 48 percent of respondents thought social media was their primary compliance risk. Supervisors had little or no confidence that they could prevent users from using these social media platforms, even if they were forbidden in the workplace.

Messaging Apps Are a Problem

Messaging apps were also an area of great concern to respondents since their use has not been demarcated by the regulators. Without this formal guidance, the report notes, “A full 39 percent of those who allow but don’t archive these messages are waiting for industry regulators to enforce guidance before they will begin archiving text messages.”

Firms are struggling to find viable solutions for these social programs, particularly since existing policies don’t seem to be working. “If procedures designed to identify risk in email are ineffective and waste time, extending those same procedures to additional content only exacerbates those results,” Smarsh said in its report.

“There is a need to rethink the traditional approach to communications supervision, especially when considering finite resources and the growing strategic role of compliance in organizational risk management.”

Changing the process of regulatory compliance has been exacerbated by the rise of mobility in the workplace, along with the introduction of new and unregulated messaging platforms. Stricter control and organized archiving of employee communications in all forms will be needed in days to come.

More from

Now Social Engineering Attackers Have AI. Do You? 

4 min read - Everybody in tech is talking about ChatGPT, the AI-based chatbot from Open AI that writes convincing prose and usable code. The trouble is malicious cyber attackers can use generative AI tools like ChatGPT to craft convincing prose and usable code just like everybody else. How does this powerful new category of tools affect the ability of criminals to launch cyberattacks, including social engineering attacks? When Every Social Engineering Attack Uses Perfect English ChatGPT is a public tool based on a…

4 min read

Despite Tech Layoffs, Cybersecurity Positions are Hiring

4 min read - It’s easy to read today’s headlines and think that now isn’t the best time to look for a job in the tech industry. However, that’s not necessarily true. When you read deeper into the stories and numbers, cybersecurity positions are still very much in demand. Cybersecurity professionals are landing jobs every day, and IT professionals from other roles may be able to transfer their skills into cybersecurity relatively easily. As cybersecurity continues to remain a top business priority, organizations will…

4 min read

How I Got Started: White Hat Hacker

3 min read - White hat hackers serve as a crucial line of cyber defense, working to identify and mitigate potential threats before malicious actors can exploit them. These ethical hackers harness their skills to assess the security of networks and systems, ultimately helping organizations bolster their digital defenses. But what drives someone to pursue a career as a white hat hacker, and how do you get started in leveraging so-called “evil” skills for the greater good?? In this exclusive Q&A, we spoke with…

3 min read

Heads Up CEO! Cyber Risk Influences Company Credit Ratings

4 min read - More than ever, cybersecurity strategy is a core part of business strategy. For example, a company’s cyber risk can directly impact its credit rating. Credit rating agencies continuously strive to gain a better understanding of the risks that companies face. Today, those agencies increasingly incorporate cybersecurity into their credit assessments. This allows agencies to evaluate a company’s capacity to repay borrowed funds by factoring in the risk of cyberattacks. Getting Hacked Impacts Credit Scoring As per the Wall Street Journal…

4 min read