Twenty-three of 24 major federal agencies engage in social media but many lack a clear plan to mitigate records management, privacy and security challenges, according to an report by the Government Accountability Office.

Only seven agencies identified and documented possible security risks--such as spear fishing, social engineering and web application attacks--to federal information systems when engaging with social media, found authors of a GAO report (.pdf) published July 28 but dated June 28.

Only eight of 23 agencies conducted and documented privacy impact assessments to identify potential privacy risks associated with social media use. Twelve agencies describe whether they use personal information obtained from social media in a formal, updated privacy policy.

"Social networking sites, such as Facebook, encourage people to provide personal information that they intend to be used only for social purposes. Government agencies that participate in such sites may have access to this information and may need rules on how such information can be used," suggest report authors.

Almost half of the agencies have not issued guidance on record-keeping roles and responsibilities, according to GAO. Auditors noted that in some cases employees ignored or were ignorant of records management concerns and could be non-compliant with federal record-keeping laws.

Only the Interior Department had developed records management, privacy protection and security risk management policies and procedures for social media use, according to GAO. The Small Business Administration, the Social Security Administration, USAID and NASA lacked any such policies and procedures for the use of social media services, found report authors.

GAO recommended that agencies ensure that appropriate records management, privacy and security measures are in place and made specific recommendations for each agency. Most of the agencies agreed with GAO's recommendations. The Agriculture Department, State Department and Defense Department only partially agreed with the recommendations made to them; GAO maintained that the actions are necessary.

For more:
- download the report GAO-11-605 (.pdf)

Related Articles:
The comment conundrum on government Facebook pages 
Report: Traditional outreach still preferred to social media on the Hill 
DARPA in search of meme tracker 
White House town hall takes to Twitter