Infographic: An Amazing, Invisible Truth About Wikipedia
Every Wikipedia entry has an optional feature we take for...
House of Cards - 1x03
Want to see more of Ida’s food creations? Be sure to follow her on Instagram @idafrosk.
Just a few months...

On May 13, 2013 I fronted #CommsChat. If you weren’t able to join in and share your expertise or ask questions on the topic of cyber security, here’s the transcript (tweetscript?!).

Behaving responsibly is a core driver of reputation. For the Hanover website I looked at how companies using social media to directly communicate with the public can demonstrate that they have given due consideration to their online behaviour.
Richard Thompson, former Chief Constable of the Civil Nuclear Constabulary talking on#cybersecure at #nextbigthing twitter.com/chrismwoods/st…
— Chris Woods (@chrismwoods)
My article below was originally published on the PRCA website.
This week, the government released statistics showing a cyber attack can cost an SME six per cent of its turnover. Worryingly, it found that 87% of SMEs and 93% of companies with more than 250 employees experienced a cyber security breach between 2012-13. The overall financial cost to businesses of cyber attacks has tripled in just a year. The Department for Business, Innovation and Skills (BIS) report released alongside the data is one that IT heads at consultancies of all sizes should be reading and acting on.
As people who help build, protect and manage clients’ reputations, PRs have a responsibility to ensure that our businesses and our clients’ social and digital properties are as secure from cyber attack as can be reasonably expected. If a client is hacked via you, you only have yourself to blame and it will have an impact on your reputation. As Wired’s Mat Honan wrote after he was famously hacked in 2012: “Those security lapses are my fault, and I deeply, deeply regret them.”
Increasingly, as communications consultants we are seeing the importance of cyber security for clients. IBM’s Peter Jopling has said they monitor 13 billion cyber events targeted at their clients each day for possible threats. Do you know how your consultancy’s IT network is being targeted? At Hanover we have conducted detailed audits of our IT setup during pitch processes. For one client, we organised for a third party to conduct a mock cyber attack against our digital infrastructure to ensure we had sufficient resilience in place to protect both us and client concerned. For another, our consultants go through multiple layers of security in order to access the client’s systems and adhere to an agreement to open our physical and digital doors for snap inspections.
The smaller, independent consultancies and freelancers shouldn’t, as journalist Mat Honan did, stick their collective heads in the sand, and as Oxford University’s Sadie Creese said, there’s no magic bullet: “There’s no once piece of tech that can protect us online.” There are some simple steps that can be followed such as making consultants change their computer passwords monthly, knowing how to handle a Twitter-based hack, ensuring mobile devices have keypad locks, moving towards two-step authentication and making sure firewalls and anti-virus software is installed and up-to-date.
According to Richard Thompson, former Chief Constable of the Civil Nuclear Constabulary, the cyber security threat primarily comes from:
If you can imagine a scenario where any of these sources might want to target your client – perhaps they are a government or work in the defence sector – then there is additional incentive to act.
Speaking at a Policy Exchange/Nesta event on 23rd April, Thompson said that it is “… not just up to the state but up to the individual to protect themselves online”, with Peter Jopling agreeing: “There’s no legislation to say you must lock your door so why should there be legislation to make you lock your digital door?” As the event began, FIFA Sepp Blatter was being targeted by the Syrian Electronic Army. The same network that claimed a cyber attack against the BBC in March and the Associated Press this week, when it compromised @AP to Tweet, inaccurately, that there had been explosions at the White House with President Barack Obama being injured.
As @pxdigitalgov discusses #CyberSecure as #NextBigThing: MT @huffpostuk: @seppblatter & Fifa Twitter accounts hacked huff.to/17SsTSM
— Chris Woods (@chrismwoods)
For professional communicators, there is a problem in the message too – cyber security seems rather geeky, like it must be someone else’s problem. Reputationally, it is our problem and we must make cyber security relevant within our business and to our clients. Sadie Creese concluded at Monday’s event by asking, how can cyber security be made relevant? She wants your views @sadiecreese.
Richard Thompson: Not just up to state. Up to individual to protect themselves, but hard#nextbigthing#cybersecure twitter.com/chrismwoods/st…
— Chris Woods (@chrismwoods)
**** UPDATE June 13, 2013 ****
Information on how to set-up two-step verification is now available via LinkedIn and Twitter.
I joined speakers from Microsoft and Code Computerlove to present at a webinar for the Chartered Institute of Marketing’s magazine, The Marketer.
The April 10, 2013 recording will help you understand:
Specifically, I talked about:
I also recommended the one book that I believe every social media manager and head of digital should read.
The webinar can be viewed here.
My comment on the Paris Brown affair can be found in this PR Week article.

Chris Woods, head of digital at Hanover, also warned against the police preventing Brown from tweeting in the future.
Emphasising the importance of guidelines when it comes to social media output, he said: ‘The way to turn this around and go forward on it is not to cut off her use of social media, as her use of it is a key way of engaging with young people. She needs to be part of showing how social media can help police listen and relate to people.’
Go Ahead and Gossip - Amy Gallo - Best Practices - Harvard Business Review
Principles to Remember
Do:
Don’t:
The day @BurgerKing was hacked
Last night my colleague, Hanover marketing manager Karan Chadda, spotted that the Heineken Corporate Twitter account (@HEINEKENCorp) has employed Twitter’s free-to-brands age screening service.

Launched quietly in July 2012, this appears to be a great way for companies and organisations with age-restricted products, content or campaigns, to be, or at least appear to be using social media responsibly.
Twitter should place more emphasis on promoting this joint initiative with Buddy Media/salesforce.com. Searching Twitter for age.twitter.com shows that there’s not a huge amount of awareness of the feature.
How Twitter age screening works

*** update May 3, 2013 ***
I wrote another post on this topic for the Hanover website: Tweet responsibly.

It appears as if there might have been a security breach on Facebook. Towards the beginning of this week, French language Facebook users reported seeing their once private messages posted to their Timelines.
However, most of the people who have come forward to bloggers, journalists and Facebook itself claiming a privacy breach, are actually wrong. For the most part, it’s actually public (or between friends) posts on each other’s Facebook walls that they can see, byscrolling back in time on their Timeline.
It is clear that even if there were such a breach affecting a small number of users, Facebook will have worked hard to fix it overnight. If the scare was real – and I’m still to be convinced through evidence – then most likely Facebook engineers were testing a new or improved feature elsewhere on the social network which lead to an element of the website breaking. As Fred Wolens of Facebook told Mashable:
“While not quite a technical impossibility, these systems are run on two separate backends which would require a non-trivial amount of work for this bug to be real.”
As I always say in social media training sessions to clients, it’s advisable to avoid posting anything that could reflect badly on you, even if it’s private, as one day, it may not be. This can be particularly important for VIPs, companies, NGOs and public bodies with reputations to protect – and a sensible social media policy should be adopted however small the organisation.
At a PRCA event next week, speakers from the Huffington Post, the BBC and others will take a look at social media crises. You can find information about the event including RSVP details here.
Aside from privacy scares, let’s consider public posts to social media. A writer in the Guardian yesterday put forward what for some could become a nightmare scenario.
What are your thoughts? Did you suffer a privacy breach on Facebook overnight? Does your organization need advice on creating a social media policy and employee training in the area? Please email or Tweet me.
Originally posted at hanovercomms.com/news-events/blog/…
Have you noticed strange messages popping into the direct message inbox of your Twitter accounts or those you manage for your company or its clients? They may read similar to this:
lol see this video about you t.co/fgjwogj
Originally posted at: http://www.hanovercomms.com/news-events/blog/post/Twitter-hacked-Steps-to-fix.aspx
Gavin Megaw is taking part in a live Guardian Q&A on reputation management.