UA Request a Risk X⁠-⁠Ray

ISMO / Insights

Messenger rules for a small team

Small companies run on messengers. That is not the problem. The problem is that nobody decided the rules, so each person runs their own. Eight rules we set up first.

  1. Two-step verification for everyoneA cloud password in Telegram, a PIN in WhatsApp. It takes a minute per person.
  2. Company chats have company ownersThe group owner is a company account, not the person who happened to create it.
  3. Review active sessions monthlyUnknown desktops and browsers are closed. It is the most common hidden access.
  4. Decide what never goes in a chatPasswords, full client data, payment details. Name it explicitly.
  5. Use auto-delete where history is a liabilityOperational chats rarely need a two-year archive.
  6. Separate personal and work accountsOr at least separate profiles. It makes offboarding possible.
  7. Know what to do when a phone is lostWho is called, which sessions are closed, who warns the clients.
  8. Write it on one pageRules that are not written down are opinions.

None of this needs new software. It needs someone to decide, write it down and check it once a month.

Request a Risk X⁠-⁠Ray All insights