Organizations' Social Media Accounts Cybersecurity Controls (OSMACC – 1 : 2021) Handbook

• Cybersecurity Policies and Procedures

  Document, communicate and comply with cybersecurity requirements for the organization's social media accounts as part of its cybersecurity policies, per related laws, regulations and organizational requirements.

  1 control

• Cybersecurity Risk Management

  Manage cybersecurity risks to the organization's social media accounts in a methodological approach that protects its information and technology assets.

  1 control

• Cybersecurity in Human Resources

  Manage cybersecurity risks and requirements for personnel handling the organization's social media accounts efficiently before, during and after employment.

  1 control

• Cybersecurity Awareness and Training Program

  Ensure personnel are aware of their cybersecurity responsibilities around social media accounts and are trained with the skills needed to fulfill them.

  2 controls

• Asset Management

  Maintain an accurate, detailed and regularly updated inventory of the organization's social media accounts and the information and technology assets related to them.

  1 control

• Identity and Access Management

  Restrict logical access to the organization's social media accounts to authorized users only, based on business need, to prevent unauthorized access.

  2 controls

• Information System and Processing Facilities Protection

  Protect the organization's social media accounts and the information systems and processing facilities related to them against cyber risks.

  1 control

• Mobile Devices Security

  Protect mobile devices used for the organization's social media accounts from cyber risks and ensure secure handling of the organization's information, including under BYOD.

  1 control

• Data and Information Protection

  Ensure the confidentiality, integrity and availability of data and information handled through the organization's social media accounts per organizational policies and related regulations.

  1 control

• Cybersecurity Event Logs and Monitoring Management

  Collect, analyze and monitor cybersecurity events for the organization's social media accounts in a timely manner to detect potential cyber-attacks early.

  1 control

• Cybersecurity Incident and Threat Management

  Identify, detect and handle cybersecurity incidents and threats affecting the organization's social media accounts in time to prevent or minimize negative impacts.

  1 control

• Third-Party Cybersecurity

  Protect the organization's assets against cybersecurity risks from third parties providing social media management, monitoring or brand protection services.

  2 controls

Need help putting this into practice? See our NCA OSMACC compliance services.