Organizational social media use is rising and growing increasingly important from a risk management standpoint, yet formal processes for it remain a rarity. Evaluating and monitoring social media risk is or will soon become a key part of audit plans. Companies without adequate social media policies place themselves at risk of security breaches and reputational damage among other issues. The precise nature of organizational social media risk is rapidly changing, which generates confusion as well as obstacles internal audit must recognize and address.

This guide can be used for identifying and mitigating social media risks within an organization.