From the excellent
Social Media: Business Benefits
and Security, Governance and
Assurance Perspectives whitepaper (.pdf) - Any strategy to address
the risks of social media usage should first focus on user behavior through
the development of policies and supporting training and awareness programs that cover:
Personal use in the workplace:
- Whether it is allowed
- The nondisclosure/posting of business-related content
- The discussion of workplace-related topics
- Inappropriate sites, content or conversations
Personal use outside the workplace:
- The nondisclosure/posting of business-related content
- Standard disclaimers if identifying the employer
- The dangers of posting too much personal information
Business use:
- Whether it is allowed
- The process to gain approval for use
- The scope of topics or information permitted to flow through this channel
- Disallowed activities (installation of applications, playing games, etc.)
- The escalation process for customer issues
Additional information on Social Media: