GAO: Feds Using Social Media, But Need Security Procedures

The General Accountability Office, the investigative arm of Congress, has released a detailed report on the use of social media by federal agencies. The subtitle of the report pretty much sums up their findings: Federal Agencies Need Policies and Procedures for Managing and Protecting Information They Access and Disseminate.

The GAO noted that social media like Facebook, Twitter, and YouTube have been endorsed by the president as a way "for agencies to more readily share information with and solicit feedback from the public." But, cautioned the office, "...these services may also pose risks to the adequate protection of both personal and government information."

GAO found that 23 of 24 major agencies are using Facebook, Twitter, and YouTube — often in distinct ways:

• reposting information available on official agency Web sites
• posting information not otherwise available on agency Web sites
• soliciting comments from the public
• responding to comments on posted content
• providing links to non-government sites

However, the agencies have made very uneven progress "in managing and identifying records, protecting personal information, and ensuring the security of federal information and systems." For instance, only half the agencies studied "have developed and issued guidance that outlines processes and policies for identifying and managing records generated by their use of social media and record-keeping roles and responsibilities."

While the GAO issued recommendations to each of the 23 agencies, all were urged to "ensure that appropriate privacy and security measures are in place," "update privacy policies," and "conduct and document a security risk assessment."

Social Media. Federal Agencies Need Policies and Procedures for Managing and Protecting Information They Access and Disseminate (GAO)