Smarsh has released its “2016 Electronic Communications Compliance Survey Report,” which has some surprising conclusions — especially regarding social media compliance.

Major Issues Surrounding Compliance

The study polled 221 financial services professionals that had direct compliance supervision responsibilities. Respondents said that policy, enforcement and retention gaps remain high. This means that firms will be vulnerable to undetected fraud, errors and regulatory penalties, the survey noted.

The professionals responding found that current supervision practices aren’t sufficiently addressing the ongoing evolution of communication in the financial services industry. Most agreed that firms have an immediate need to rethink their approach to the retention and oversight of electronic communications amid a demanding regulatory environment.

Social Media Compliance Officers Are on the Hook

Risks in compliance are everywhere. Supervision of new communication types poses a big challenge: Most firms have been overwhelmed by the sheer volume of email they must review to meet requirements. Not only that, but the resources available to address this issue are growing slowly, if at all.

Communication “outside the compliance perimeter” can be a significant vulnerability. In fact, 48 percent of respondents thought social media was their primary compliance risk. Supervisors had little or no confidence that they could prevent users from using these social media platforms, even if they were forbidden in the workplace.

Messaging Apps Are a Problem

Messaging apps were also an area of great concern to respondents since their use has not been demarcated by the regulators. Without this formal guidance, the report notes, “A full 39 percent of those who allow but don’t archive these messages are waiting for industry regulators to enforce guidance before they will begin archiving text messages.”

Firms are struggling to find viable solutions for these social programs, particularly since existing policies don’t seem to be working. “If procedures designed to identify risk in email are ineffective and waste time, extending those same procedures to additional content only exacerbates those results,” Smarsh said in its report.

“There is a need to rethink the traditional approach to communications supervision, especially when considering finite resources and the growing strategic role of compliance in organizational risk management.”

Changing the process of regulatory compliance has been exacerbated by the rise of mobility in the workplace, along with the introduction of new and unregulated messaging platforms. Stricter control and organized archiving of employee communications in all forms will be needed in days to come.

More from

Vulnerability resolution enhanced by integrations

2 min read - Why speed is of the essence in today's cybersecurity landscape? How are you quickly achieving vulnerability resolution?Identifying vulnerabilities should be part of the daily process within an organization. It's an important piece of maintaining an organization’s security posture. However, the complicated nature of modern technologies — and the pace of change — often make vulnerability management a challenging task.In the past, many organizations had to support manual integration work to get different security systems to ‘talk’ to each other. As…

How I got started: SIEM engineer

2 min read - As careers in cybersecurity become increasingly more specialized, Security Information and Event Management (SIEM) engineers are playing a more prominent role. These professionals are like forensic specialists but are also on the front lines protecting sensitive information from the relentless onslaught of cyber threats. SIEM engineers meticulously monitor, analyze and manage security events and incidents within an organization. They leverage SIEM tools to aggregate and correlate data, enabling them to detect anomalies, identify potential threats and respond swiftly to security…

Tequila OS 2.0: The first forensic Linux distribution in Latin America

3 min read - Incident response teams are stretched thin, and the threats are only intensifying. But new tools are helping bridge the gap for cybersecurity pros in Latin America.IBM Security X-Force Threat Intelligence Index 2023 found that 12% of the security incidents X-force responded to were in Latin America. In comparison, 31% were in the Asia-Pacific, followed by Europe with 28%, North America with 25% and the Middle East with 4%. In the Latin American region, Brazil had 67% of incidents that X-Force…

Cost of a data breach 2023: Geographical breakdowns

4 min read - Data breaches can occur anywhere in the world, but they are historically more common in specific countries. Typically, countries with high internet usage and digital services are more prone to data breaches. To that end, IBM’s Cost of a Data Breach Report 2023 looked at 553 organizations of various sizes across 16 countries and geographic regions, and 17 industries. In the report, the top five costs of a data breach by country or region (measured in USD millions) for 2023…