Here are some ways to help to ensure that you have a social media security that protects your brand and your customers.

1. Establish an official social media policy and ensure it is communicated across your whole organization. This is a document that outlines specifically how your organization as a whole and individual employees should conduct themselves when engaging in social media activity of any sort. It helps to establish a unified social media brand and provide guidelines for online messaging from a corporate perspective.
2. Change your social media account passwords monthly and also admins should do this. Randomize them, don’t repeat them, and don’t use common data points such as names, birthdays, or buzzwords.
3. Use at least a two-step authentication method for accounts. This is an increasingly common secure login method that requires users take at least “two steps” to verify their identity before they gain access to an account, such as providing a password and then using a code texted to them on their account’s associated mobile device.
4. Have a dedicated social media manager who constantly monitors account activity. This can be a full-time, in-house position or at least part-time, engaging someone on your digital team or a freelancer.
5. Curate your connections, Friends or Followers to weed out fake accounts. Delete connections that seem fishy, post repetitive content, or constantly post negative or harmful content.
6. Train all your employees on social media security awareness and procedures.
7. Set up an approval process for all social media posts across all brand-related accounts (and have it managed by the person you establish to oversee your accounts).
8. Do not list company vacation times on social media. This sort of information might allow public knowledge of vulnerable periods where you don’t have staff on hand to handle a hacking attempt.
9. Never post personal information, either of employees or customers. This lets you avoid potential identity theft or online impersonation.
10. Perform regular security audits that check elements such as your current security/privacy settings, user access, user publishing privileges, and current security threats.
11. Close any accounts that are no longer used or have been inactive for a while, to avoid them being hacked and used to access and compromise active accounts.

src: https://fraudwatchinternational.com/social-media/social-media-security-best-practices/