Burak Bakay

Social media account security standards

  • For security reasons, individual administrator rights shall not be available for our Facebook, Twitter and other social media accounts. In other words, administrative rights shall be limited.
  • A shared Agency Facebook corporate account (https://www.facebook.com/help/131976240210052) shall be created for necessary operations. The account shall fulfill the following requirements:
    • It shall not contain words such as the name of the Agency, as the admin may attract unwanted attention.
    • The access password shall be set on https://www.random.org/passwords/?num=5&len=12&format=html&rnd=new and communicated to the digital team in the format indicated below.
    • It shall be used for the brands owned by The Digital Agency.

 

  • Passwords for social media (e.g. Twitter) and email accounts shall fulfill the following requirements:

 

    • Twitter passwords shall be shared with at most two people, who shall perform the necessary updates at the Agency.
    • In order to prevent unauthorized access, accounts associated with the brands must not be authenticated on mobile devices, such as those with iOS.  Mobile devices shall not be used to perform updates.
    • Passwords that can be easily guessed (e.g. trial123456) or weak passwords must be updated.
    • Passwords must be hard to guess, of at least 12 characters (uppercase/lowercase characters, numbers, symbols) in length and changed every 60 days. The URL https://www.random.org/passwords/?num=5&len=12&format=html&rnd=new shall be used to create highly-secure passwords.
    • The employees of the Agency who have access to the password shall be individually liable and the Agency shall be institutionally liable for any damages that may result from changing the passwords, disclosure of passwords due to carelessness and their falling into the possession of third parties as a result of similar causes.
    • The passwords held by the Agency shall not be sent through email.
    • A document that can be shared and accessed on a private basis must be created in Google Docs for all passwords (Facebook, Twitter, etc.), and these passwords must be written on this document through HTTPS only. They shall always be kept up-to-date. The email addresses, to be obtained from the Digital, of relevant employees of the Agency shall be authorized so that they are able to edit Google Docs documents.

Hello,

I’m Burak

I’m founder and director of The Digital Agency; a certified Google Partner and Shopify Partner digital marketing agency operating in London and Istanbul. The Digital Agency has a solid track record of delivering high growth in eCommerce, Facebook & Google advertising, social media communication, search engine optimization, eCommerce and website production through 16 years of experience with 140 brands in 500 projects. Visit The Digital Agency here

Recent posts