Risk management in social media: An educational framework for building digital security in the context of NIS2

Social media platforms have become one of the central components of the contemporary digital environment, used for personal communication as well as for organizational and societal purposes. Alongside the opportunities they provide, these platforms also represent a significant source of information security risks, including social engineering, impersonation, disinformation, and data leakage. This paper examines risk management in social media in the context of Directive (EU) 2022/2555 (NIS2) and the guidelines of the European Union Agency for Cybersecurity (ENISA), considering social media as part of a broader digital ecosystem subject to systematic risk management. The main contribution of the study is educational and methodological. A model is proposed for integrating social media risk management into education, combining practice-oriented pedagogical approaches with a methodology for effectiveness measurement based on the HAIS-Q questionnaire.