Social identity, explained.

Account takeover is an attacker gaining control of a legitimate account, and on corporate social accounts it almost always happens through people and process rather than through the platform itself.

Brand impersonation is the use of a brand's name, logo or imagery on an account, page or profile that the brand does not own, in a way that presents it as official or affiliated.

A business manager is the platform-side container that owns a brand's accounts, pages and ad assets and controls which people and partner organisations can access them.

Cybersquatting is registering a domain name that trades on someone else's brand in bad faith, usually to resell it at a markup or to intercept traffic intended for the brand.

Digital risk protection is the practice of finding and removing the threats to a brand that sit outside its own network — on social platforms, in app stores, on look-alike domains and across the open web.

Ghost access is a live grant on an account held by someone who should no longer have it — a former employee, a finished agency, a contractor whose engagement ended.

Joiner-mover-leaver is the access control process covering the three points at which a person's access should change — when they join, when they change role, and when they leave.

SCIM is the open standard that lets an identity provider push user accounts and group membership into another system automatically, so joiners and leavers propagate without anyone doing it by hand.

Social engineering fraud is a loss caused by deceiving a person into authorising a payment or handing over access, rather than by any technical compromise of a system.

Social media governance is the set of controls that establishes who owns a brand's social accounts, who can reach them and how that access is granted and removed — as distinct from managing what gets published on them.

A social media handle is the unique username that identifies an account on a platform — the @name in its URL — and, unlike a display name, only one account per platform can hold it.

A takedown is the removal of an infringing or impersonating account, post or page by the platform that hosts it, following a report the platform accepts.

Typosquatting is registering a near-match of a brand's domain or handle — a transposed letter, a missing character, a swapped top-level domain — to catch people who mistype the real one.

The UDRP is the arbitration procedure for recovering a domain name registered in bad faith against a trade mark, run through approved providers such as WIPO rather than through a court.

Verification is a platform's own confirmation that an account genuinely belongs to the person or organisation it claims to, shown as a badge on the profile.