1. A computer program product for managing an authentication policy for a user on a network of an organization, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions readable by a hardware processor to cause the processing circuit to perform a method comprising: determining at least one social media attribute of the user, the at least one social media attribute being related to activities of the user on one or more social media websites and comprising at least one of: how many social media accounts the user has on the one or more social media websites and how many social media postings the user has made on the one or more social media websites; assigning a social media risk value based on the at least one social media attribute of the user; determining at least one network activity risk attribute of the user, the at least one network activity attribute comprising at least one of: a number of devices that the user uses to access the network, a type of device that the user uses to access the network, and an operating system running on a device that the user uses to access the network; assigning a network activity risk value based on the at least one network activity risk attribute; calculating a current risk assessment score of the user based on the social media risk value and the network activity risk value; determining the authentication policy for the user based on the current risk assessment score; and providing to the user access to the network of the organization upon detecting that the user has met requirements of the authentication policy determined for the user based on the risk assessment score.