Social media security awareness addresses: oversharing personal information (social engineering material), organizational information disclosure (technology stack, security measures), and account security (strong passwords, MFA).
Employees posting about work projects, tools used, or business travel provide attackers with spear phishing material. LinkedIn reveals org chart, job roles, and technologies. Policy: what's acceptable to share about work online? Training should include specific social media examples.