Social media is an unprecedented phenomenon that has opened new worlds of opportunity for organizations around the globe. While the potential and rewards are seemingly limitless, so are the challenges and risks. Savvy organizations are making it a priority to re-think outdated ‘Internet’ policies to include social media, bringing significant changes to their security posture. Today the lines between an individual’s work persona and private persona are increasingly blurred. Forums, blogs, and popular social networks like Facebook, LinkedIn and Twitter are just the tip of the social media iceberg. The ubiquitous nature of smartphones and other mobile devices has made the ‘anywhere, anytime’ Internet a reality, and sensitive company information is no longer confined to the limits of the corporate perimeter. Social platforms are thriving, but so are schemes to use them for crime and ill will. Risks such as data leakage pose the biggest threat to most organizations. Social media ‘squatting’ and sophisticated social engineering schemes are changing the landscape for security professionals, with consequences ranging from brand reputation damage and lost productivity to potential physical harm to employees and executives.