Sunday, September 30, 2012

Has Adobe Gotten its Mojo Back?

Has Adobe Gotten its Mojo Back?:
For the past several months a creeping sense of ambivalence between myself and my relationship with Adobe had been rattling through my consciousness like a song I couldn’t get out of my head. As a web guy I couldn’t shake the sense that Adobe was spending an inordinate amount of time telling the universe how great things were with DPS and mobile with very little chatter over on the web side of the fence.

In short, I detected a disconnect between Adobe’s claim to love web development and its “practice” of pushing DPS at the industry. With all of the cool web technologies that were cascading down on us I just couldn’t understand why Adobe was so slow in reacting to an industry that was in hyperdrive when it came to “change”. It was almost as if, since its Flash announcement last year, that the company had somehow lost its mojo.
The only real connection I was feeling with Adobe was the Animate team.
Then, for over a year, the Adobe Animate team took a group of us for the ride of our lives. They were developing an HTML5  app that used CSS3 and JavaScript to create motion and interactivity. Intellectually, it was one of the most stimulating experiences I have ever had with Adobe. The pace of change – a new revision roughly every six weeks – was breathtaking. New features were discussed one day and demoed the next. This was not my normal testing experience with Adobe and I would jokingly tell the team they should be hanging a Pirate flag from the rafters of their offices.
In early August I received an invitation to attend an event called Create The Web in San Francisco on September 24, 2012. I hesitated accepting. Having been through far too many of these Adobe events where the sizzle got everyone jazzed and the sizzle fizzled when we got hold of the technology, I was, needless to say, rather skeptical. Which is exactly how I felt when I took my seat among the digerati and fanboyz at the event in the Yerba Buena Centre. As I sat waiting for the things to start I couldn’t help but think it ironic this event was being held in the same place where Apple had just introduced the iPhone 5. The location, as it turned out,  was not ironiic. It was exquisite because the Edge tools and services Adobe unleashed that day are going to have a rather large impact on the content that shows up on those screens.  As Adobe so neatly put it before dropping the Edge stuff on us: ”The modern web needs modern tools.”

Create the Web San Francisco Keynote
Not only have the tools become modern but Adobe’s attitude seems to have profoundly changed.
Over the past year or so Adobe has spent a lot of time talking about how they want to support the Open Source community. With the Edge lineup, Adobe is not only talking Open Source talk, but also walking the Open Source walk. Many of the tools and services in the Edge lineup were developed on GitHub. Then Adobe listened to the feedback and even accepted some open source contributions from the developers that were tagging along for the ride.
Before I dig into the Edge collection, the first thing you need to know is these tools and services are not even close to being in the same league as Dreamweaver CS6 or any other visual editor or web tool offered by Adobe. These things were built on the web, for the web and are designed to work within the context of the modern web content creation process by using or manipulating HTML 5, CSS3 and JavaScript. They are all designed to work singly but, when used in a comprehensive workflow, they truly become those modern tools. Responsive Web Design ripples through the lineup and there was not one app or service presented where the word "mobile" was not in the slide deck or spoken by the presenter.
The otheraspect of Edge is the term "modern". Presenter after presenter made it clear that updates, changes and feature additions to these products are going to occur at a pace that ranged from weeks to months.
Let’s take a quick look at the array of Tools and Services that currently comprise the Edge lineup.

Edge Web Fonts

When Adobe bought Typekit, the first company to actually make web fonts available to the community, it also got Jeffrey Veen who was put in charge of the Creative Cloud . It was no surprise then to see Jeffrey wander on stage and proceed to set the tone of the morning by knocking us out of our seats.
This new service is, to say the least, stunning. It will regularly offer a range of free fonts- 500 to start with-  from Google, Typekit and other sources. Simly head on over to the webfonts page, select a font from the pop down and help yourself to the resulting JavaScript. Did I mention these fonts are free?
Not only that, but TypeKit will soon be offering a further 1,000 fonts from the Monotype collection. For the graphics community this is huge because, in certain respects, the Monotype collection is the “Gold Standard” for type. If Adobe can bring a foundry with Monotype’s street cred to the table, you can bet the others won’t be far behind. It could just be that the modern web is in for a long overdue Typographic Renaissance.
Another announcement that sort of got overlooked was the release of a new Open Source font Source Sans Pro which is designed to work with code editors and is the default font for Adobe Code.
You can read about why it was developed on the Adobe blog and you can pick up a copy at sourceforge.net.

Edge Code

This one is downright scary … in a good way. For the past several months Adobe has had a preview of an open source code editor – Brackets – available on Labs and GitHub. What we discovered is that Edge Code is actually built on top of Brackets, which is an open source project and, as such, the Brackets part of that equation is … and this is where the “good scary” comes in … going to be updated every 2.5 weeks.
What Edge Code does is provide you with a code editor that allows you to edit a line of HTML, CSS3 and Javascript code from the place in the code where those lines are located. You also get code hinting, an inline color picker and direct hooks into WebFonts and PhoneGap Build. Then it gets better; you can see your changes or progress in a live Webkit preview.
You can start working with a preview release by visiting the Edge Code page.

Edge Inspect

For the past several months Adobe has been letting people kick the tires of an app they called Shadow. Essentially, Shadow let’s you open an app or web project that is under construction in Chrome and, magically, that page appears on all of the devices registered with the app. I am sad to report that Shadow has been withdrawn. That’s the bad news. The good news is, it has resurrected as Edge Inspect. Not only can you use Inspect to preview your work but you can also inspect the code on the device, which is a major boost to the debugging process.
Another rather neat feature of Inspect is the ability to tell your devices to take a screenshot. These screenshots are placed on your desktop and you can email them to your clients.
This app is available right now and, if you have a Creative Cloud membership, it is most likely already sitting on your computer.

Edge PhoneGap Build

This one was rather interesting. When Adobe acquired PhoneGap it was rarely talked about outside of the context of it being a service available through Dreamweaver. It sort of made sense because PhoneGap, in extremely simple terms, took web code and created mobile apps. That part hasn’t changed but the mobile web has and the “Build” part of the name is the key.
What this does is to give developers a tool that will package an app for iOS, Android, Windows, WebOS, Blackberry and Bada without you having to set aside space on your computer for each platform. Inside Build, you choose the platform and the app is “constructed” in the cloud. The new "hydration" feature, among other things, pushes your changes/updates directly to the previously installed version of the app. Where this really gets neat is that Edge Code is fully integrated into Edge PhoneGap Build meaning you can wire up the projects in Code and have Build construct them without ever leaving the Edge environment. This app is now available.

Edge Reflow

This one caught everybody by surprise. How Adobe managed to keep a tightly ratcheted down “Cone Of Silence” around the development of this application tells me they swiped a page from Apple’s playbook.
If you caught my series around Dreamweaver’s Fluid Grids here at Webdesigntuts+ you may have also caught my subliminal message around them: “ It’s an OK first shot at Responsive Web Design but there is a ton of improvement needed.” I take that back. When Reflow is released, they become irrelevant.
Reflow is a visual RWD editor that has the promise of making the Fluid Grids process in Dreamweaver CS6 look like a wind-up toy.  Reflow gives you full control over the breakpoints between varying screen sizes, code control and export to Edge Code, Dreamweaver or any other editor and full WYSIWYG control over the CSS . I don’t normally get excited about this sort of thing, thanks to Adobe’s “Sizzle/Fizzle” track record, but this one has me hooked. The reason is, one of the guys who is involved in the development of Reflow is none other than the father of RWD: Ethan Marcotte.
That’s the good news. The bad news is the app isn’t ready. What I do hear is that a public release will be available by the end of the year. I can hardly wait to start kicking its tyres!

Edge Animate

The final app is Animate. It has been floating around Labs for well over a year and has moved from simply shoving divs from here to there to a full blown HTML 5, CSS3, JavaScript motion graphics tool complete with interactivity and some serious RWD hooks that allow your work to appear on any screen, anywhere … and that includes DPS and iBooks.
It is available right now and … are you ready for this … it will be free for the next 12 months even if you don’t have a Creative Cloud membership. Really, I am not making this stuff up.
A noticeable hole in the lineup is some sort of graphics/imaging tool that isn’t Photoshop. Instead the app could be a sort of lean, mean Fireworks that creates the jpg, png, svg and gif images destined for use in Animate or Reflow. Bopping between Illustrator, Fireworks and Photoshop to produce the content used in these apps is a cumbersome process.

This Could be Fun

As I was hanging around outside the building waiting to get in somebody said, "Great, Adobe is going to tell us how to create the web. Next they will be telling us how to use it." By the end of the day, Adobe didn’t have to tell us how to use the web. The message that came through loud and clear was, "Here are a bunch of tools that are going to change how you create the web. Now go out and use them."
Has Adobe gotten its "mojo" back? That one is hard to say but this new line of products is a clear indication that it is on the right track. This could be fun.

Saturday, September 29, 2012

A Guide to Making Your Business Video SEO Friendly

A Guide to Making Your Business Video SEO Friendly:


Creating online videos can be an excellent way to promote your business and increase brand awareness and trust. But how can you 
ensure that the right audiences will find your video?
Many video marketers think posting videos to YouTube is the only step they have to take for their videos to start circulating. But in the vast sea of the Web, simply uploading videos isn’t enough—consider the fact that only 50 percent of YouTube videos get 100 or more views. To make sure your videos are getting the reach they deserve, the key is to optimize your videos for search engines.
Because sites like Google can’t “read” a video, it’s important to focus on providing keywords and utilizing other strategies to pull your business videos into search results. Below are a few strategies you can employ to make your video SEO-friendly:

1. Content is King

If your video doesn’t contain compelling content, it will have a short lifespan no matter what your SEO efforts. First, you need to determine your message, and stick to it. Ask yourself: Who is my audience? What are their wants and needs? What do they want to see or hear? What do they want to know?
Once you’ve laid out a message and determined your audience, decide on the subject of your video. Many businesses don’t think they have relevant content to share, but any business can film how-to videos (these are generally very popular), interviews with customers or company leaders, tie-ins to current events, industry news, or tips and advice. Write a script and practice it beforehand to avoid sounding robotic.

2. Keep It Short

We’re more prone to remember what we see and hear rather than what we read—which is part of the reason online videos are such a successful marketing tool—but our attention spans are short. According to ReelSEO, about 10 percent of viewers click away after the first 10 seconds of a video, and almost 54 percent leave after only one minute.
Strive to keep your videos between one and three minutes to avoid drop-off, and aim to keep your viewers’ attention for at least the first eight seconds. If a viewer leaves before this, their viewing session won’t count toward your view count on many platforms.

3. Incorporate Keywords Everywhere You Can

Once you’ve nailed down your message and content, identify popular keywords for your topic or industry. Include them in the title, description, tags, subtitles, captions, and category listings. Consider including a written script with your video, and keyword-optimize it as well. Always keep your primary keywords first, and list the rest in order of importance. Keywords are often the only clue Google has when determining if video content is appropriate for a search result, so be as thorough as you can.

4. Share Your Video Everywhere

This includes social media sites like your company’s Twitter, Facebook, and LinkedIn page, but also share your video on your personal networks. Embed the video on your company blog, and send it out via an e-newsletter. Invite colleagues and customers to share and leave comments, and consider uploading your video to a number of different hosting sites like YouTube, Vimeo, BuzzNet, and Yahoo! Video.

5. Track and Analyze

Tracking and analytics are important for you to determine how well your videos are performing. Things like drop-off rates, total viewing time, and viewer demographics can all impact how you’ll craft your next video and will tell you where you’re successful and where your videos are lacking. Many video hosting sites have basic analytics tools built in.
These are just a few basic strategies you can employ to ensure your video is optimized for search and gets the lifespan it deserves. Each of these practices should be used in combination for the best results for your video marketing plan.
What are some other tips you’d give to businesses looking to make their videos SEO-friendly? Share your thoughts in a comment below.
Image Credit: Danard Vincente/Flickr
Jeff Fissel
Jeff Fissel is the co-founder and Vice President of Solutions at KZO Innovations, a video software company that provides an on-demand video platform for small to large enterprises and government customers. Connect with Jeff and KZO Innovations on FacebookTwitter, and LinkedIn.

OWASP Membership Deadline

OWASP Membership Deadline:
Hello all,

I would like to remind everyone ONE LAST TIME of the September 30, 2012 membership deadline for eligibility to vote in the OWASP election. The members of the committee are not paid marketing people, or paid by OWASP for our efforts;  we are all volunteers, just like you. We pay membership because we want to support our local chapter, OWASP projects, and other efforts to raise awareness of critical software security issues.

OWASP needs your donation to continue to provide vendor neutral services and to continue to develop quality tools and documentation in our open source community.

For less than $1/week, you can support your local chapter and vote in the Global OWASP Election.

Become a member Today!

https://www.owasp.org/index.php/Newmembership

If you are already a paid member, than please accept our sincere thank you for your continued support.

Honorary members can also vote in the election.  If you would like to apply for honorary membership please complete the honorary membership form before September 30, 2012.

https://docs.google.com/a/owasp.org/spreadsheet/embeddedform?formkey=dHA4dno2TlhSa0pVSUNQclZCOWROV0E6MQ 

Respectfully,

Helen Gao, CISSP
Global Membership Committee Chair
https://www.owasp.org/index.php/Global_Membership_Committee#Membership_Committee


Using Mobile Applications for attacking Web Applications

Using Mobile Applications for attacking Web Applications:

This simple blog post was motivated by my desire to look at
some mobile applications that I happen to use. I did not choose a specific methodology for testing mobile
applications. What I did was to use some of my knowledge in testing web
applications in general.
To my pleasant surprise I got results that made
​​me happy, or not.


01 - Catalog Application.
Starting my tests, on the first application I
noticed the web server authentication credentials are simply sent in plain text
using a POST method.
Gafisa-borrada
Most of these mobile applications are just simple frontends
for web services.
This behavior has been confirmed in all tested applications.
Some examples.
02 – Auction Application
Screen Shot 2012-09-26 at 2.23.01 PM
Let's start intercepting the requests of the mobile
application and doing a simple SQL Injection test:
Leilao-02-borrada
In this specific case it was possible to notice that the application
consumed by Mobile Application is vulnerable to SQL Injection attacks.
So, one would ask, should I be attacking a Web Application
or the Mobile Application?
The answer for this question is easy, go for the Web
Application.
Extracting information’s
via SQL Injection:
Leilao-03-borrada
Leilao-04-borrada
Leilao-06
Leilao-07-borrada
After that, I’m hungry… and I love sandwich!!
03 – Fast-food Delivery Application
Ohhh no… another application that my credential in being
sent in plain text.
Essa
Conclusion
Because it is a Mobile Application developers might be
forgetting the basics of security.
If your Mobile Application is a simple frontend
the same concepts of web security must be considered.  Think about it and check some of the following
references for security best practices:
OWASP
Development Guide.

OWASP Transport Layer Protection.
OWASP SSL Best Practices.

Thursday, September 27, 2012

W3C Unveils Plan to Finish HTML5 in 2014

W3C Unveils Plan to Finish HTML5 in 2014:


Image: Screenshot/Webmonkey.
Like the Cylons, HTML5 was created by man. It rebelled. It evolved. It looks and feels like HTML. And now, it has a plan.
Namely, to be done in 2014.
The W3C has formalized its plan to move the HTML5 spec to the official “Candidate Recommendation” status by the end of 2014. That might seem like a long time from now, especially if, like most of us, you’ve been using the bulk of HTML5 for some time, but 2014 is quite a bit better than the 2022 date that used to be tossed around.
But there’s a catch. In order to get HTML5 to the Candidate Recommendation stage on time the W3C is going to move some less stable parts of the spec to the newly designated HTML 5.1.
HTML5 has already been “modularized” over the years, spinning off sections like Web Workers, WebSockets, Microdata and half a dozen others, which are all now separate specifications at the W3C.
Now the W3C plans to split the remaining chunk of HTML 5.0 into HTML 5.0 and HTML 5.1. Each spec will then move through the process of becoming an official web standard. Here’s the W3C HTML Working Group’s plan for HTML5:
  • we determine which features are likely to meet the “Public Permissive” CR exit criteria,
  • we create a “stable HTML5.0″ draft which includes just those “stable” features, and which omits the remaining “unstable” features
  • we create an HTML 5.1 editor’s draft which is a superset of the stable HTML5.0 but with the “unstable” features included instead of omitted, and also with any new proposed features included
The HTML WG would then rinse and repeat with HTML5.1 in 2016. And then HTML5.2 and so on. The result will hopefully be a faster evolving series of specs, which in turn means more features reach the Recommendation stage in less time.
For web developers in the trenches finalizing HTML5 might seem irrelevant — after all, browsers already support most of it so who really cares? There are two reasons reaching the Candidate Recommendation stage matters: It usually means improved cross-browser support and it always means that the spec is covered by the all important W3C patent policy, which ensures that HTML5 remains a royalty-free standard.
For a complete list of everything that’s “unstable” in the current draft of HTML5, as well as the plan for how to handle it, be sure to read through the W3C’s plan.

CVSS for Penetration Test Results (Part II: Attack Sequences)

CVSS for Penetration Test Results (Part II: Attack Sequences):

CVSS needs to be extended to accommodate combinations of vulnerabilities.  The current documentation explicitly states:
"Vulnerability scoring should not take into account any interaction with
other vulnerabilities."  But interaction among vulnerabilities is
crucial for understanding the implication of particular vulnerabilities existing
in an organization's environment.
Without rehashing Part I of this post, here's a simple,
but real-world example.  The use of
Telnet receives a CVSS score of X, and a network's vulnerability to ARP cache
poisoning receives a CVSS score of Y.  The risk of these vulnerabilities occurring
together should be significantly higher than the risk of these vulnerabilities occurring
independently.  A network where these two
vulnerabilities are present is equivalent to a network where unencrypted
usernames and passwords are broadcast to every node on the network.

When I made these points in the
context of a talk I gave at Shmoocon this year, a member of the audience
brought up CAPEC as a potential solution.
CAPEC is a distant relative of CVE, a Mitre-sponsored program for
"Common Attack Pattern Enumeration and Classification."  But CAPEC is out to solve a different set of
problems for a different audience.  The
"attack patterns" that CAPEC enumerates are not multiple distinct
exploits chained together during a multi-phased attack, but instead are common
patterns used by attackers in exploiting code.
The audience is the software development community, and the patterns
describe what is in my terminology a single exploit, such as "SQL
Injection".
So what are we to do?  One potential solution may be to introduce a
new environmental score that can be used in a generic way to take compounded
vulnerabilities into account.  Call the
new metric "CoexistentVulnerability", which takes "High",
"Medium" and "Low" values depending on how severely a
neighboring vulnerability impacts a vulnerability's risk.  In my example above, the Telnet and ARP
spoofing vulnerabilities might receive a mid-level score, but when occurring
together, the "CoexistentVulnerability: High" metric would push them
each to high-risk scores.
But I suspect a real solution will have to
introduce a new metric that is applied to tuples or sets of vulnerabilities.
 One possibility would be to use "Attack Sequences."  Trustwave
has recently added Attack Sequences to PenTest Manager, our
web portal for penetration test results.  Attack Sequences are somewhat like
attack trees.  An attack tree is built on a root node that represents the
ultimate target, and then displays branching nodes depicting the possible
avenues that could be pursued by an attacker to reach the root node.  (For more on attack trees see Bruce Shneier's
classic article
from Dr. Dobbs Journal
.)
An Attack Sequence, on the other hand, is
rooted on a particular event -- such as the acquisition of target data or the
exploitation of a vulnerability -- that occurred during a penetration test, and
displays branching nodes depicting the vulnerabilities exploited by the
penetration tester that were part of the sequence.  Attack Sequences are flexible with regard to
temporal relations. For example, the root node could be the exploitation of a relatively
low-risk vulnerability, say verbose error messages from a web server, which led
to the discovery of several additional vulnerabilities, including one that led
to the compromise of target data.  In the
Attack Sequence pictured below, the arrows represent a relation like "led
to the discovery of".
Screen shot 2012-09-23 at 3.08.38 PM Alternatively, the root node could represent
the acquisition of target data with child nodes representing the
vulnerabilities that came together to make the compromise possible.  This is depicted in the Attack Sequence below,
where the arrows represent a relation like "was dependent upon".
Screen shot 2012-09-23 at 2.31.11 PM
Merely possible or incidental paths are not
displayed, but only those nodes on the "critical path" -- the nodes
that played a direct role in the ultimate compromise of target data. This means
that the severity of risk attached to each vulnerability in the sequence should
be directly related to the other vulnerabilities in the sequence and the risk
associated with the ultimate compromise.
Vulnerabilities arranged in an Attack
Sequence could receive an additional CVSS score that takes into account the overall
risk presented by this particular sequence of vulnerabilities.  Perhaps this could take the form of a fourth
optional CVSS scoring group: Base, Environmental, Temporal and Sequence.
Development is already well underway for CVSS Version 3, but it's
too early to tell whether this issue will receive any attention from the CVSS
authors.  

OWASP Membership Deadline

OWASP Membership Deadline:
Hello all,

I would like to remind everyone ONE LAST TIME of the September 30, 2012 membership deadline for eligibility to vote in the OWASP election. The members of the committee are not paid marketing people, or paid by OWASP for our efforts;  we are all volunteers, just like you. We pay membership because we want to support our local chapter, OWASP projects, and other efforts to raise awareness of critical software security issues.

OWASP needs your donation to continue to provide vendor neutral services and to continue to develop quality tools and documentation in our open source community.

For less than $1/week, you can support your local chapter and vote in the Global OWASP Election.

Become a member Today!

https://www.owasp.org/index.php/Newmembership

If you are already a paid member, than please accept our sincere thank you for your continued support.

Honorary members can also vote in the election.  If you would like to apply for honorary membership please complete the honorary membership form before September 30, 2012.

https://docs.google.com/a/owasp.org/spreadsheet/embeddedform?formkey=dHA4dno2TlhSa0pVSUNQclZCOWROV0E6MQ 

Respectfully,

Helen Gao, CISSP
Global Membership Committee Chair
https://www.owasp.org/index.php/Global_Membership_Committee#Membership_Committee


Facebook Advertising / Marketing: Best Metrics, ROI, Business Value

Facebook Advertising / Marketing: Best Metrics, ROI, Business Value:

patterns 1Facebook has an incredible audience, 950 million strong and counting. This audience is immensely attractive to Brands and Marketers around the world. We've seen explosive growth in brand pages, types of advertising and other fun ways to monetize this audience.

Increased investment in Facebook as an engagement/acquisition channel has translated into requests from CEOs, CMOs and other CxOs about the return on that investment. As Facebook is a very young channel, it is not surprising that everyone's struggling with the answer.
This point was vividly illustrated at a session I attended at a major industry conference.

A Facebook employee (FBe) gave a talk about measuring ROI/Value of Facebook campaigns. FBe's recommendation was (paraphrasing a 35 min talk):
Don't invent new metrics, use online versions of Reach and GRPs to measure success. The value of Facebook in "spreading word of mouth," "getting your brand in front of friends of fans," and "engaging fans with five to seven posts a week on your fan page."

They closed with the Facebook Insights tool (which is quite nice). This blog post is about the above recommendations, and their merit. But first let's punch up the value you'll get from this post.
In the second part of the talk a large client joined FBe on stage to make the case for Facebook campaigns.

Here's a summary of the case study presented:
1. Client posted a video of a soon to be released product on their Facebook brand page. It is a lovely emotional video (really was!).
2. That video got a magnificent number of Likes.
3. Client also runs Facebook Promoted Ads for that post. Gets more Likes.
4. ROI? It was huge. The new product became the number one selling product in the company's history in that country.
5. Facebook works.
The case study seemed to contain a rookie mistake.
I can see the correlation, but the conclusion implies a causality that may or may not be there ("the product sales exceeded all internal projections!").
correlation xkcd
There are two valuable lessons we can learn from the above story.
Lesson 1:
Correlations don't imply causality.
Completely ignore the question of whether Facebook works (assume we are taking about Ren Ren or Google+). Focus on the fact that this was the launch of a powerful new new product via a continent-wide rebranding campaign using massive online and offline media buys.
A push on Facebook was a part of that effort.
So to imply the ROI in Step 4 is sub-optimal.
From the data presented, there is no way to tell if the Facebook campaign worked or not. Even if there were millions of Likes on the post with the deeply emotional video about the new product.
Lesson 2:
It would have been easy to identify causality, even if it was weak causality.
The Client could still do massive media buys (TV! Radio! Newspapers! Google!) in all countries in continent A. But they could also only make a major push with Facebook in country X.
Then, they could look at sales in all the countries including country X and a couple of other countries (Y, Z, A) that are similar to country X in terms of type of population, existing brand awareness, market penetration, competitive structures. This is a massive continent with lots of countries, should not be hard to do.
From that analysis, they could identify the incremental sales in country X compared to Y, Z and A. Attribute it all to the Facebook campaigns.
Compute ROI: (cost of Facebook campaigns + salary of people running campaigns + agency creative costs) vs. profit from incremental product sales.
Based on results of value identified for Facebook, optimize their advertising mix strategy for future product launches.
My recommendation above is the simplest way to attempt this. To rigorously prove value we could all work together to create purer controlled experiments.
It is always so cool to run marketing campaigns in large homogenous markets (like Europe, Asia, or large chunks of the US). It is possible to get good test and control groups (type of population, existing brand awareness, market penetration, competitive structures) for our experiments. Then we can treat every campaign as an opportunity to identify causality between the money spent on advertising and the product sales achieved.
It goes without saying, this is exactly how I would prove causality if I was running social media campaigns on Twitter, Ren Ren or vKontakte.
Attending this presentation inspired me to write this blog post. The case study presented raised tough questions.
Why is it so hard to measure the value of Facebook? How can we do better? Why don't more CMOs spend millions of dollars of budget on Facebook, like they might do on AOL and Bing and Yandex?
The long flight home helped me arrive at two conclusions: We (CxOs, Marketers, Analysts) don't really understand what is unique about Facebook. (This makes me really sad.) Because we don't understand the uniqueness, we fall back on profoundly sub-optimal old world metrics like Reach or Online GRP equivalents.
We can do much better. Let's together try to fix those two problems.
advertising options on facebook
The Setup/Broad Context.
Since we are interested in identifying the ROI/Economic Value of Facebook efforts, we'll assume that we are a for-profit entity who makes by selling our products and services or we are a non-profit who would like to spread the word and raise donations.
In both cases we are using Facebook to improve our bottom-line.
My hope is to start by correcting one of the foundational flaws about how we think about Marketing/Measurement and Facebook, then clearly identify two things we have to do to prove Facebook's ROI, dive really deep and identify specific ways to measure each effort we undertake on Facebook and close with a handy measurement summary along with my personal crazy social media lessons.
Our sections are:
I would love for you to read the post in the above order. You're welcome to read a section or two, as time permits, and then come back and read the next section and so on and so forth. I did not want to take short cuts, I did not want to rush through critical concepts, hence the post is long. But if you read it, I promise, you'll see Facebook marketing, advertising and analytics in a completely new light.
Excited? Let's go!
Facebook Advertising/Marketing ROI Challenge: You're Thinking Wrong
I wanted to come up with a way to visualize the unique challenge Facebook faces when it comes to proving ROI.
I don't think it is simply a metrics/measurement problem. Metrics are a problem. But that is not all there is to it.
It is a "what you actually do with it" problem.
In almost all other types of advertising today our purpose is simple. When you run a search ad on Baidu (or display ad on AOL or participate in AdSense or…), the objective of your advertising is (holy grail time now…): find the right person, at the right time, target them with the right message ("I beg you, please come to my site!") and get them off the advertising channel and onto your site.
You've deployed five, six or 15 web analytics tools on your website/mobile app. You can measure like crazy what happens when that advertising results in a visit.
For all other advertising, except Facebook, your "let's prove the ROI of this channel" process looks like this…
traditional advertising analtyics focus 2
To understand advertising effectiveness you'll spend some time measuring CPMs, CPCs and, every other Wednesday, CPAs. If you are new to analytics, maybe you obsess about the wrong thing (impressions). That is ok.
But you spend almost all your time measuring bounce rates and page views and time on site and all that other ok stuff. As you mature you start measuring things that really matter, macro and micro conversion rates, economic value, visitor loyalty. All the things that directly tie to the bottom-line of your company, which you can tie to Net Income driven by digital.
As you go from maturiry to true wisdom, you add multi-channel analytics and prove the value of digital on your offline existence (catalogs, store purchases, call centers, etc.). And then beyond, to measuring your Net Promoter Score (or the latest flavor of the month customer centric metric), etc.
You can see how it is trivial to show the value of your Bing and Baidu and AOL and Yahoo! and AdWords ads. And if you want to go beyond trivial effort, you can show offline and non-line impact.
But all this changes when it comes to Facebook.
At the most macro level we don't participate on Facebook to get people to come to our digital existence. We participate on Facebook to engage with people via our brand pages, and those people just stay with us on Facebook. Maybe some of them remember our brand name and our products (Lord knows we are pimping ourselves aggressively on those brand pages) when it is time for them to make a purchase.
Yes, you can also buy display advertising on Facebook to drive people to your site. But most of the advertising that Facebook suggests you do on Facebook is to help you get more people to Like your Facebook brand page/posts, or to break the limits placed on you by EdgeRank and reach people who already like you.
Here's a good example. Facebook is suggesting that I run an ad for my brand page using a reply I'd written in a post (a little weird to run an ad on a reply to someone else, but you can see how you could run an ad for your brand page):
fan page ads
You can click on Get More Likes button and proceed into Facebook's advertising system to get more likes by setting up an ad/sponsored story:
sponsored sotry ad facebook
Introduce my brand to a big audience, 164 mil in the US per Facebook (though consider this number as "general guidance" and not reality), or be more targeted with my ad (and money) and target a smaller, more relevant audience by their demographics, interest categories and other dials that Facebook empowers me to leverage.
Another ad format you can use is the Promoted Posts format. I can post something on my brand page and then leverage Facebook's massive audience to get them to see my awesome post and get more of them to engage with the post (and my brand). Here's what that ad product, and set up, looks like:
promoted posts ads
For fifty bucks I can reach 14k to 26k people (based on my ad targeting options). Hopefully some of the people who already like my brand page will come to read the post and engage with me (helping me bust through the limits placed on my reach by Facebook EdgeRank), and (fingers crossed) perhaps some of their friends will see my post and Like the post or Like my brand page and maybe visit it again in the future.
By creating a Facebook brand page for your company and spending money on Facebook Advertising, as with the two ad options above, you are using your Facebook investment to:
1. Earn Likes
2. Engage an audience temporarily and, if you are good at social, engage at least a subset on a more regular basis
This is a very different from what you were doing with Bing and AOL and all the other digital advertising platforms.
You are not rushing the audience to your digital existence.
You are spending money on Facebook for an opportunity to build an audience on Facebook for an opportunity to engage them awesomely (by not pimping yourself constantly!) for an opportunity for this audience to 1. love you and recommend you to their friends and 2. to remember to buy your products/services when they might need them.
As a deep lover of true utility marketing, I believe in the value of doing this. I believe in the value of building an audience, rather than renting it.
But it is absolutely critical that you understand that when you engage in any discussion about the value of being on Facebook, and spending money on Sponsored Stories or Promoted Posts, the picture (what are you actually trying to do) has completely changed. Understanding and painting this different picture is even more critical when you talk about Facebook ROI with your executives.
For Facebook, the "let's prove the ROI of this channel" process looks like this…
facebook advertising analytics focus 1
Because we are trying to build an audience on Facebook, it is unsurprising that we will spend almost all of our focus and attention on what is happening on Facebook. We will measure Likes and Friends of Friends and Total Reach (more on all these potentially sub-optimal metrics later). For our Facebook ads we will measure CPC and Social CTR and Gender and all that good stuff.
We have our business URL on our brand page (you do, don't you?), and some people will click on that URL and come to our website (desktop or mobile). A good business analyst will measure how many clicks came through from Facebook, and she/he will also measure the conversion rate, revenue, etc., from those clicks.
But since your original purpose was to create an owned engaged audience on Facebook, rather than primarily driving direct revenue via constantly "pimping of coupons, offers," it should come as no shock to anyone that the conversion rates, revenue and bottom-line metrics from Facebook will be pretty small from the brand page efforts, from the Sponsored Stories, from the Promoted Posts. Because (sorry I'm repeating myself) that was not the point. Having a conversion business impact was not the point. And people who've tried to make it the primary point have failed miserably on Facebook.
facebook and traditional advertising difference map
It is very, very important to:
1. Understand this
2. Get a shared understanding with your management team of why you are on Facebook
3. Then think about how to measure ROI
All of the above will ensure that some of the, sorry, abject silliness and insane journalistic stories written about Facebook's lack of ROI will die.
There is one exception to all of the above.
Facebook and Direct Response/Traditional Advertising
There are some ad formats on Facebook where you are simply advertising on Facebook just as you might using DoubleClick or Yahoo! or Google Display Network. There is an audience out there — 950 million strong!. Let's show them ads, let's get them to come to our site.
Cut out the whole "let's send them to our brand page or get them to like a post and maybe in the future they'll buy something, maybe."
A good example of this is the kind of ad you can run to drive people to your website:
advertise on facebook drive to your site
The challenge to overcome, as it often is with display advertising, is that people are on Facebook to Friend and share pictures and engage with Sarah Palin (and your business). The ads are tangential, at best, to these purposes and hence the click-through rates are pretty low. People end up developing banner blindness (which happens on all display channels).
But it is an option.
Another option is the new (at least to me, see below) Facebook Offers ad product:
facebook offers
This is traditional advertising: Create an offer. Show it to people. Drive them to your online or offline existence.
For both of these ad formats you can forget about what Facebook is really good at. Forget about audience building. Forget about engagement. Forget about utility marketing. Forget about that big aqua colored box in the above "FB is different" graphic.
Focus just on this big orange box.
You can measure CTR, CPC, Bounce Rates (yes even in the real world :), Time on Site, Conversion Rate, Average Order Value.
And present these to your Senior Leaders to judge success. Easy peasy.
But, as I said, this is not what makes Facebook unique.
Let's go measure the ROI/Value of Facebook on our business doing what Facebook is really good at.
Facebook's Business Value: Two Critical Elements
To convince CMOs and CEOs that Facebook delivers value, you need to prove two things.
1. The activity you generate on Facebook is valuable.
In some cases this is easy, because the CxO does not quite understand the ecosystem and is happy to allocate some budget to Facebook because everyone's doing it. It's a start, but you won't get very far.
The prove value scope here is: Likes. Brand Awareness/Word of Mouth. Engagement. Or to use my metrics: Conversation Rate. Amplification Rate. Applause Rate.
This helps you sell the value of Facebook to your business as a new owned platform you've created. Frame it as that.
[And it will not hurt to add that when CxOs fund Print, TV, Billboards: 1. It is extremely unclear how to measure success and 2. Unlike what happens on Facebook, there is ZERO engagement/longer term value delivered, you are, at best, renting an audience.]
An additional prove value scope can also be: Cost savings.
The number of PR people you can now fire because your Facebook page is such an awesome PR platform – not. The reduction in customer service costs – no more phone calls! The reduced TV ads you have to run. Et cetera. Harder to prove, but if you try you can.
This helps you sell the value of Facebook to those execs who are a little suspicious of this whole social thing, and that it can actually save some money. So, tie it to the bottom-line.
So far, for most companies, it is very hard to show the value of Facebook all by itself (from Brand, Likes etc., and cost savings) — mostly because the execs can't make the leap required to see the longer term potential.
2. The activity you generate on Facebook delivers business value, online or offline, and helps produce profits.
The prove value scope here is: Visitors to your website. Revenue per Facebook-referred visitor (staying with last click attribution for now). Number of qualified leads. Total number of donations. Number of downloads of our latest mobile app from Facebook visitors. Amount of Cereal/Soda/Pizza/Phones/Shirts sold at Walmart/Target/Sainsburys/Watsons because of Facebook.
I would go out on a limb and say that there is no CxO in the world who would not understand the value of Facebook if you can show any of the above. Even if they don't understand the short or long term potential of the social web revolution.
When you set out to prove value of Facebook, your job is to understand that the reasons for investing in Facebook are very different from the reasons for investing in Bing or Baidu or AOL, and your job is to prove the two things listed above (value of activity on Facebook, value of activity on Facebook on your business).
Proving the Value/ROI of Investment in Facebook.
Let's take off our clothes and jump into the cold unforgiving data waters and talk metrics.
If you strip everything away, as designed, Facebook is a quest for Likes. It is what you are asked to hunt for at every turn by Facebook and Social Media Gurus. Yet in the end, Likes matter lesser than less. What matters is:
1. Do all those Likes cause any activity of value on your Facebook presence?
2. (Most importantly) Do all these Likes cause activity of value to your actual business (beyond your Facebook presence)?
For each Facebook effort, we are going to look at #1 or #2 or both depending on what we are trying to accomplish.
Facebook Brand Pages
Without brand pages you can't do anything on Facebook. Create a brand page. If you are looking for inspiration … my absolute favorite small business example is Seventh Generation. I can't think of even one other business that understands its Facebook audience as well as they do. I can't think of anyone else that delivers the perfect balance of pimping (very little) and life value to the audience. If you want a big business example, BMW is a good one. Most big companies stink on Facebook because they don't understand what Seventh Generation does. Or maybe big companies are incapable of being selfless (focus on the fan and not themselves) or authentic.
What can you measure to show value: Do. Not. Measure. Likes.
I will personally hate you.
Too strong?
Declaring success based on measuring Likes in aggregate is like declaring success after getting a lot of Visits to your site. SO WHAT? Likes are actually lamer. Because once I press Like I might never come back, never read anything you write, never ever engage with you, not even remember you exist.
Total Likes show potential audience. But nothing more. Don't be lame and measure Total Likes.
[We are going to deploy the measurement of Likes at a tactical level in this post to gain a oh here's a small way to understand value perspective. But not, ever, in aggregate.]
You want to answer the "so what question," so you have to look beyond the obvious. You want to know what is happening after you created the brand page, and some people liked it.
Here's what Facebook provides you with:
facebook insights summary
Likes tells you potential audience (nothing else). Friends of Fans gives the size of your second level network (almost 100% useless). People Talking About This is a compound metric – they are usually non-insightful – that kinda of sorta tells you that one of seven things might have happened, but not which ones (kind of interesting, but not in this form). Weekly Total Reach shows the impressions of your Facebook ad/post/things (kind of interesting – think TV GRPs). Total Subscribers is what it says, for your page (not sure if this is anything).
Nothing here to answer the "so what" question.
There is some more data you can get on Facebook if you scroll to the post level view:
facebook insights post details
Reach, meh. Engaged Users sounds really interesting as it purports to show actual real human interactions (FB definition: "Engaged Users is the number of people who have clicked anywhere on your post."). TAT is meh because it is a compound metric. Virality also sounds really interesting (FB definition: "Virality is the number of people who have created a story from your post as a percentage of the number of people who have seen it. This is a great indicator of the kind of posts your audience responds to.") [Update: As Jeff and Daniel have pointed out in comments below, both Engaged Users and Virality, interesting as they sound, are sourced from our Reach and TAT metrics! We will address is below.]
The reason most executives don't perceive the value of Facebook is because of how Facebook has defined success. From the "sexy names" of the metric it is very hard to figure out what they are actually measuring, and, most importantly, none of the provided metrics seem to answer the "so what" question at all. This really hurts Facebook.
I believe metrics should measure only one thing to ensure everyone knows exactly what is being measured (hence no compound metrics). They should go beyond measure "impressions," they should measure "clicks." In other words, they should measure outcomes.
Here are three metrics I like, for all social channels (from my best social media metrics post):
1. Conversation Rate: # of Audience Comments (or Replies) Per Post
2. Amplification Rate: # of Shares Per Facebook Post
3. Applause Rate: # of Likes Per Facebook Post
These three clean metrics answer these questions clearly: When we post on Facebook does anyone actually engage with us via typing on their keyboards and adding to the discussion? When we post on Facebook does anyone amplify our contribution so that it is seen by people who don't know about us? When we post on Facebook, which content is loved by our followers/fans/friends (so that we can kill the loser stuff)?
The data for all three is in the metrics Facebook provides. Unfortunately it is blended and hard to get to recognize/analyze.
Take for example Talking About You. Here's the official definition: The number of unique people who have created a story about your Page during your selected date range. A story is created when someone: Likes your Page; Likes, comments on, or shares your Page post; Answers a question you've asked; Responds to your event; Mentions your Page; Tags your Page in a photo; Checks into or recommends your Place.
I dare you to analyze which one of those things is happening more or less, or working better or worse, when you see 699 in your report.
So keep things clean.
For your Facebook brand page at an aggregate level, measure Conversation, Amplification and Applause.
You can use any tool you want to measure this; I use TrueSocialMetrics
true social metrics 2
You'll measure the trends over time and you'll be able to show your management team that you have a trillion Likes, you have managed to have a conversation with 5 people on average per post (not "People Talking About" of 699), your post has been shared x times each and you are going to focus on high-applause posts. [Rather than being an end in themselves, Likes here are 1. active and 2. used to identify high-value content via user behavior.]
Sweet, right? You know the "so what," it is clean, you know what to fix, and you know whether those aggregate Likes are adding up to specific engagement.
Time to dive deeper.
At an individual post level, if you are using the data in Facebook Insights, measure Engaged Users and Virality to optimize your Facebook brand page engagement/value.
facebook insights post details focus 1
These two lovely metrics from Facebook empower you with diagnostic capabilities to understand why your Conversation, Amplification and Applause Rates might not be where you want them to be, and to figure out which Facebook brand page contributions are better or worse.
Clearly, looking at the above data, I should do more of what I did on Sept 17th!
[Update:]

If you step away from Facebook Insights then you can do better, at a Post level, and measure the metrics that really matter. Facebook kindly provides a Export Data button in its Insights reports. Click it. From Select Data Type choose Pot Level Data.
In the spreadsheet look for the tab called "Lifetime Post Stories by act…" If you squish the columns you'll find something delicious, columns titled "like," "share," and "comment." Now you have the capability to measure the exact same metrics we use at Page level, but now you can do so at a Page level.

facebook post level engagement metrics

This helps us achieve a clear line of site between measuring Page and Post level value delivered by us, and what kind of engagement we are getting in exchange. Over time as you look at these metrics you'll know 1. what posts are perceived to be of value 2. what type of posts people help you spread around more and 3. what type of posts drive conversations (!).
Simple metrics help you focus on what's important and answer the "so what" question for your Facebook brand page:
Conversation | Amplification | Applause | At a Page and Post level
How can you magically report all of them together? I don't know. But I'm happy you can't data puke and you have to go find this data and look at it. That promotes analysis. :)
Important Note 1: In this section we've measured the active engagement that is created from your brand page. Not everyone who reads your content will actively engage with it. Some might choose to passively engage with it. They come. They read. They do nothing with you on Facebook. This does not mean their visiting your page, or just reading the content was valueless. They might have been impressed, they might buy your products. We just don't know. They are the classic unknown unknowns. If you want to learn more about this passive engagement, and how hairy this can actually get, please ready my good friend Thomas Baekdal's wonderful post: Facebook Insights: Debunking Friends of Fans.
Important Note 2: Your Facebook brand page, in addition to the above engagement, will produce some sales, even if you don't try. :) How do you measure that? Please see the Analytics custom report in the FB (Display) Ads section below. That is how!
Facebook Promoted Posts
With Promoted Posts you are simply trying to 1. Bust out of the Facebook EdgeRank limitations to reach more people who already like you and/or 2. Reach the friends of the people who already Like you (think Amplification).
You pay money. You get more exposure. You can get more Likes for the post (directly in the news feed). You can get more Shares. You can get more Comments on your post. Maybe you can get more Likes on your brand page.
So what can you measure?
First go into your Facebook Ads Reports, then Facebook Campaigns, click on Reports, choose Advertising Performance as the Type, and select your promoted posts.
You have a raft of metrics available. Focus on Clicks, CPC and Budget. How much did you spend and what did you get for it? (This is easier if you go into Facebook Campaigns and click on the pencil next to the campaign and give cleaner names to your promoted posts campaigns.)
Then drill down to look at each individual promoted post’s performance.
When your promotion is complete, you can see Budget Spent and Paid Reach. Compare and contrast across posts.
You can also see activity: Page Post Likes, Comments on Page Posts, Link Clicks and Video Plays (both if relevant). And you can compare it across posts you have Promoted…
facebook promoted posts results comparison
You can get contextual information on Paid Reach. Just hover over People Reached and you'll see your Organic (constrained by EdgeRank), Viral (Shares by others) and Paid…
facebook promoted posts results
The number you are looking for is 221 (Paid). You'll notice the numbers above do not add up to 440, that is simply because some people might have seen the post via multiple methods (so I got it first just organically, EdgeRank did not limit it, and then I saw it again when you paid for it).
You can see another cool visual by hovering on the percentage number:
facebook promoted posts results2
It shows you how many impressions of your Promoted Posts were shown in people's news feeds. It is cute.
From the data Facebook provides for Promoted posts if you prioritize these metrics, it will help you optimally determine impact of your spend in terms of value added to your Facebook brand page:
Budget | Paid Reach | "$ per Incremental Reach" (Budget/Paid Reach) | Incremental Likes | Comments
You are able to show how much money you spent, the cost of reaching an additional audience, the results in terms of engagement (incremental likes and comments).
In terms of optimization, at the very minimum focus on $ per Incremental Reach. Experiment with Facebook targeting options and over time reduce $ per IR while delivering incremental Likes and Comments at the same or higher level.
While you are able to show some value added to your Facebook brand page, the challenge with Promoted Posts is that the "so what" is extremely unclear.
So more people saw my post, some of them even liked and commented on it. So what? The connection between you writing a post to you promoting it to possibly getting a new audience to them engaging to them going to your site/physical store to them buying something is fragile. I was going to say unclear, but let's stick with fragile.
You can frame it as "we are making our Facebook brand page more valuable by getting an incremental audience." And tie it to the stuff we did above for brand pages, to create an owned audience on Facebook.
Request for Facebook: Clustering & Segmentation
What would be ideal is to maybe pull all the new Likes collected via Promoted Posts to be identifiable in a unique way (just like conversions we got from Bing or Email marketing). Likes we might not have received if we had not spent money on Facebook advertising.
Then over time we could measure these people (segmentation!) to see if they were of value. Did these people, we acquired at a cost, have a higher Conversation Rate or Amplification Rate or Applause Rate?
If they don't have higher rates, or even the same rates, then we are acquiring a sub optimal audience and we should stop spending money on Facebook. Or they have the same or higher rates, let's give Facebook unlimited budget.
Facebook Sponsored Stories
Here is the simplest explanation of sponsored stories from Facebook's help page:
"If someone likes your Page they are saying they are interested in being connected to you and it can be interpreted as an endorsement of your brand or service. People may see when their friends like your Page, but because there is a lot of activity in news feed, they may miss it. When you create sponsored stories, you’re increasing the number of people who will learn about you through the actions of their friends."
Interpretation? When people like you or talk about your brand, you can take that, package it into an endorsement and show it to other people. I write a post about Cafepress being great. You can pay to get that packaged into an ad that will be shown to my friend.
facebook sponsored stories
What is the purpose? Earn more Likes, be introduced to a potentially new audience.
Best metrics to show value?
Budget | Paid Reach | "$ per Incremental Reach" (Budget/Paid Reach) | Incremental Likes | Comments (or your preference for engagement).
Aggregate impact on your Facebook brand page? Hard to identify.
We can't identify the long term impact of spending money on Sponsored Stories (helpful pdf) because of the same challenge above, no clustering/segmentation is possible.
Cafepress could get a million new Likes because they sponsored a story about a post I'd written about them, but there is no way for Cafepress to know if the audience they acquired (my friends/fans) are worth anything in the short or the long term. It is extremely difficult to know if the million new Likes delivered a valuable audience, increased engagement on the Facebook brand page, or, over the long term, this audience placed more orders on Cafepress.com.
Simple controlled experiments could possibly help us get a slightly enhanced understanding of the impact.
If other variables can be controlled, you can run sponsored stories a bunch of times (weeks, a month) and measure your overall Conversation, Amplification, Applause rates and your individual post Engagement and Virality. Then for the next month, don't do any sponsored stories. Repeat the same measurement. See if sponsored stories add any value.
This assumes you can keep the posting quality the same, and you don't have any extraneous circumstances were you are suddenly showered by a massive number of Likes due to an external campaign.
Like I said, hard to identify. But that does not mean you can't try.
Business bottom-line impact of sponsored stories? Unclear. See relevant section above in promoted posts.
facebook occams razor adFacebook (Display) Ads
I'm using the word display simply to clarify that these ads will be very similar to those that might run on any other ad platform, and the purpose would be the same (get people to our mobile/desktop websites).
You can see one such ad on the right. I'm targeting 14 million people who are in the US (again the 14m is "general guidance," you'll rarely come even remotely close), who are in a relationship, married or engaged :), who are in tech or business categories. My ad, unsurprisingly, extols the glory of my blog and promises riches and fame, as all ads should.
(Is it not cute that my ad says: You like Avinash Kaushik. :)
How do we measure success?
To measure real success you HAVE TO make sure that all your ads are tagged with campaign parameters. The url in my ad is not:
www.kaushik.net/avinash
It is:
www.kaushik.net/avinash?utm_source=social-media&utm_medium=Facebook& utm_campaign=thomasb
Without this you are going to cry later. A lot.
If you use SiteCatalyst or WebTrends or CoreMetrics, use their campaign parameters.
Ok, how do we measure success?
Facebook will give you a raft of metrics. From Facebook's collection I'm fond of these: Click-thru Rate, Social Click-thru Rate (to see if socially annotated ads are better), Cost Per Click.
You can't really do CPA with Facebook, else I would have it there (for CxOs FB should consider doing conversion tracking). I'm not a fan of impressions, so I ignore things like CPM, etc.
Time to do the analysis that actually matters to your executives, measuring outcomes!
If you'd used campaign tracking parameters then it is trivial to create a simple custom report that would show you the deep view of Facebook campaign performance…
facebook campaign performance 1
Can you show the impact of your Facebook Advertising on your business bottom-line?
Yes! Yes, sweet nectar of a lotus, yes!
You can measure the number of people that showed up. You can measure if they were new or you already knew them. You can measure their micro and macro conversions, and how much money you made per visit.
Bonus: You can compare the performance across your Google+ and Twitter campaigns, and smile because you, dear reader, are doing very well on Facebook in terms of outcomes (now just find more relevant people to show ads to in that 950 million pile on FB!).
Unlike AdWords you can't merge your Facebook advertising data with your onsite analytics data in Google Analytics. You'll have to do that manually. But in the final summary you'll measure your Facebook (Display) Ads using a report that shows:
Click-thru Rate | Social Click-thru Rate | Cost per Click | Visits | Unique Visitors | New Visits | Micro Conversions | Macro Conversions | Per Visit Goal Value
You can replace the last one with Revenue or Average Order Value if you are hard core ecommerce.
Facebook Advertising's Offline Impact
This part is super complicated for Facebook because of everything you learned in the second part of this post. But we all know that this is a challenge that all digital advertising faces. We have to prove the value of Google and AOL and Yandex and everything else on our big business offline existence.
In case of Facebook, as outlined at the start in the story of Brand S, controlled experiments are our BFF.
Here's how this will unfold inside your company:
Question from CEO: Can I drive people to buy more Pepsi at Wal-Mart by running a bunch of Promoted Posts, Sponsored Stories AND Facebook Display Ads.
You: Hmm… I don't know. Wait, let me check Occam's Razor.
Few minutes pass.
You: Yes we can! I'm going to pick 25 cities in the US. I'll bombard users in those cities with Facebook Ads. They'll come to our brand page, love it, and comment on it and we'll reply to them, talk about new Pepsi Min, etc. Then after two weeks I'll get my sales data for the Wal-Marts in my 25 cities and compare the sales for Pepsi Min, and see if there is a statistically significant lift in sales when compared to other cities I did not bombard with Facebook ads.
CEO: OMG, you are so clever. Go do that. And come back and tell me Facebook works!
It is a little harder than that. You do need people (/one person) inside your company with skills in the Scientific Method, Design of Experiments and Statistical Analysis. And you'll need cooperation from your offline existence (Wal-Mart in this case).
But it is doable, if you really want to prove the value of Facebook.
In addition to the above scenario, you can use Primary Market Research to isolate the impact of your active Facebook participation in creating incremental lift in your likelihood to recommend our brand or Net Promoter Score, or in your brand perception, or a strong signal in brand recall studies, or… other qualitative metrics.
You would need a large enough study and a large enough number of people who Like you on Facebook and a smart researcher.
But it is doable, if you are committed.
The bottom-line, a bit more severe for Facebook than for Bing or Yahoo! or other digital platforms, is that Facebook is going to have to prove this type of an impact in the long run because of this…
facebook and traditional advertising difference map
When we are on Facebook we are trying to create that big aqua box, our own owned audience. For a small part of that we will show the orange impact. For most of it we are going to have to work hard and prove that an owned audience is monetizable and delivers business value. It is straightforward with Facebook (Display) Ads, but they do poorly. So for all other stuff, because the aqua is big and not the orange, we are going to have to solve this problem.
If we don't, we will have a hard time showing long-term sustained value from Facebook (or Twitter or the Google+ website).
Facebook prove the value to me Summary
This is an incredibly complex space, and there are so many insights and recommendations. It is hard to summarize all that into one handy dandy view. But I'll be remiss if I do not give it a try.
Here's a simple view of what it takes to measure the return on investment and business value of Facebook:
facebook marketing advertising roi measurement metrics map
Click on the image for a higher resolution version.
I hope you find the summary to be of value. If you use other metrics, or find flaws above, please share them via comments.
Closing Thoughts: Two Crazy Social Media Lessons
1. Don't have a social strategy: create products and services that compel social activity.
At the end of the day, it is important to remember that the Facebook engagement you create, the amount of traffic you can get from Facebook (to your online or offline presence) will rarely match the engagement, reach and outcomes that people who love your products will create for you.
So yes, focus on having a great Facebook presence and buy ads on Facebook, but remember to make your products and services so amazing that people can't help talk about them on Facebook. The impact of this organic (free!) activity will blow your mind.
Ultimately social is not just about how social your company is. It is about how many social ripples your products/services create.
Don't believe me? Just ask Apple. :)
2. Social media success does not guarantee, business success.
Dippin' Dots crossed five million Facebook Fans a couple of days before they filed for bankruptcy in Nov 2011. (They were recently rescued from bankruptcy, no not by their Facebook fans. :)).
Pepsi is one of the most active social media participants, including on Facebook. Yet year over year they've continued to lose market share to Coke.
The examples are numerous.
In the end, business success (amazing products and services) can be hugely amplified by social media. Social media success can rarely make up for core problems with your business / business strategy / products and services.
Please keep these two humble lessons in mind.
I'm a big huge insane fan of this amazing evolution in how we influence people. I can't wait for the era of non-contextually shouting on TV/Radio/Magazines to die. I can't wait for irrelevant badly targeted interruptive advertising to die. Our ability to reach the right person at the right moment with the right message is turbocharged by a combination of social and mobile. That makes me so happy. I'm deeply excited about utility marketing, again powered by social and mobile.
I hope you see this post as a pragmatic way to look at optimal Facebook participation, and a real world practical guide to measuring the value of Facebook to your company. If you use the recommendations in this post to show reality today, learn your lessons, go back and optimize your Facebook strategy and drive more business value, you'll accelerate your company's ability to move from the past (shout marketing) to the future (conversation marketing).
Insights and recommendations in this post apply almost 100% to Twitter, Google+, Pinterest and the next social network the press deems the new "Facebook killer!"
Thank you for reading.
As always, it is your turn now.
Do you get asked to prove Facebook's value? What strategies do you use that have worked for your company/agency? Have you figured out a clever way to measure impact of Facebook on your digital existence or your real world existence? Anything short of controlled experiments? Are you as wary of Likes and Impressions as I am? Oh and do you think I should abandon my pollyannaish world view and just give in to metrics like Reach and Online GRPs to get more budgets shifted to digital?
I welcome your critique, brilliant ideas, wry observations, and delightful comments.
Thank you.

Facebook Advertising / Marketing: Best Metrics, ROI, Business Value is a post from: Occam's Razor by Avinash Kaushik

Wiredwizrd

Morgan Todd Lewistown, PA

Experienced Information Technology Manager with a strong knowledge of technical guidance, IT best practices, security protocols, team leadership, and analyzing business requirements.
Google