Technology controls should be paired with user training that clarifies the enterprise’s expectations for appropriate behaviour and practices while accessing social media on company devices or via company networks. As discussed earlier,young professionals have become so comfortable sharing information in the social media environment that they may not realise – nor have they ever been taught – that even small pieces of information posted on a social network can cause damage to a business. Lack of both user training about security concerns and guidelines for disclosing information online can be causes for this kind of risk exposure.