The Risk Management Monitor has this:
"We’ve spent a lot of time — both on this blog and in our magazine — trying to better educate risk managers about the risks of social media. The long and the short of it is that, for most industries, social media opportunities far outweigh the potential downside. There must be a policy in place and there is the possibility of self-inflicted reputational harm that never would have occurred otherwise. But in 2012, not having any social media presence, for most companies, is like not having a website in 2002."
Read the full article here.