This is an interesting point of debate, as it questions a company's internal control vs external gain. Since the point here you are addressing is the unintentional irresponsible use of Facebook et al, it calls for stricter organisational policies (rather rules) to restrict employees the access to their private profiles while using the company's internet network. Since almost every small & medium scaled organisation has 'promotion using social media' on their strategic e-marketing campaign list, is it possible for information on official company fb/twitter pages to be misused as well? If yes, this would pose a bigger threat. Any viewpoints?