The Department of Homeland Security must promote, as a matter of policy, a sector-bysector information security awareness training program.

CENTERFORSECURITYPOLICY: What should be done?

In general, it is fine to allow employees to access these sites with appropriate security awareness training and a clear acceptable use policy.

FORBES: Social Media: A Nightmare For Enterprise IT Security?

Last month the company announced changes that are meant to improve its internal privacy and security practices, including enhancing training for employees on information-security awareness and requiring every engineering project leader to maintain a "privacy design document for each initiative they are working on, " Mr. Eustace said in the post.

WSJ: FCC Investigating Google Data Collection

Google Senior Vice President Alan Eustace agreed that the company will improve training measures on security awareness and data protection issues for all employees, the ICO said.

CNN: Google to delete inadvertent Street View data