Yes, if a correct policy is missing

Jan 18, 2005 17:31 GMT  ·  By

Instant messaging is booming. Almost everywhere you look, people are typing messages to friends and work colleagues at a frantic pace. By the end of 2004, total revenues for instant messaging markets worldwide have reached $131 million and, by 2008, that number is expected to be $413 million. According to recent surveys 70% of business users are using one or more IM systems, which they consider to be more efficient the e-mails or phone calls.

Despite of this numbers, the majority of global businesses have still not implemented management systems to protect against the potentially serious legal, security and compliance risks associated with employee use of instant messaging.

According to a poll published by Akonix Systems and The ePolicy Institute, in which were surveyed nearly 300 companies, 60 per cent of respondents stated that they do not have any measures in place to manage employee IM use.

In addition, 38 per cent of those polled have not yet rolled out a formal IM usage policy in their organisation. Even among companies that have a policy in place, 21 per cent reported that employees openly flout company guidelines. That's why businesses should make informed decisions about using instant messaging, seek favorable contractual protections from vendors, and adopt internal procedures and safeguards to minimize risk. For example:

Establish a written policy - Carefully consider whether to permit instant messaging. If instant messaging is allowed, consider using an in-house instant messaging system and advising employees to use that system at work rather than their personal systems.

Educate employees - Educate employees on risks associated with instant messaging. For example, advise employees not to share passwords with others and not to open unfamiliar attachments.

Enforce policies with technology solutions - Block instant messaging spam addresses and place anti-virus software on users' desktops.