# Risk Perceptions on Social Media Use in Norway
## 5 Analysis and Results
### The Consequences of ID Theft
#### 5.3.3 Activated Measures  
We asked the respondents who had had their social media account compromised what measures they had implemented to increase the security of their account post-compromise; the controls implemented can be seen in Table 27. The question about measures implemented let them choose more than one option; that is why the total number of controls exceeds the N = 47 people who had their accounts compromised. Not all the security measures I asked about are current best practices in information security like periodic password changes, that NIST is now not recommending companies to require. From Table 27, we can see that the most popular measure to apply is 2-factor authentication 32, and notification on suspicious behaviour 29. After that comes starting to use passwords longer than 12 characters 22 and having the firewall turned on 15. A total of 13 people started changing their passwords regularly, 11 started using an anti-virus and 9 people took other measures. Five people have changed their passwords to a password shorter than 12 characters.  
One respondent commented on the efficiency of two-factor authentication: _\"I approximately get two text messages each month about log in attempts at Facebook using my username and password, but they can not get in because I have activated two-factor authentication...\"_  
The people that chose the option that they were changing their password regularly were asked with what regularity they change their passwords. From the Table 28, we can see that most of the people who have incorporated regular password changes into their security practices change their passwords every third month. Seven people started changing their passwords every third month, while three people decided that once a month was the appropriate time for regular changes. One person went with more frequently than once a month; one person went with every six months and one person changes their password yearly.  
\begin{table}
\begin{tabular}{l l} \hline \hline
**Password Change Frequency** & **Count** \\ \hline Every third month & 7 \\ \hline Every month & 3 \\ \hline More frequent than once a month & 1 \\ \hline Every six months & 1 \\ \hline Every year & 1 \\ \hline More infrequent than every year & 0 \\ \hline \hline \end{tabular}
\end{table}
Table 28: Shows how often the people who had decided to use regular password changes as a control changes their passwords. N = 13.  
\begin{table}
\begin{tabular}{l l} \hline \hline
**Measures** & **Count** \\ \hline Activated 2 factor authentication & 32 \\ \hline Activated notification on & 29 \\ suspicious behaviour from the account & \\ \hline Changed password to a password & 22 \\
12 characters or longer & 22 \\ \hline Have the firewall turned on & 15 \\ \hline Stared changing passwords regularly & 13 \\ \hline Use anti-virus & 11 \\ \hline Other & 9 \\ \hline Changed password to a password & 5 \\ shorter than 12 characters & 5 \\ \hline \hline \end{tabular}
\end{table}
Table 27: Measures users who have had their accounts compromised have activated to help mitigate a new compromise. N = 47.