Aside from the obvious waste of company time that could otherwise be put to some productive use, should organizations be concerned about employees using social networking sites? Maybe. In fact, company policy regarding social networking sites should possibly extend beyond working hours. An employee may not use company resources or time to access the site, but if an employee posts sensitive information or derogatory information about the company on their personal MySpace page, it can have an impact on the company. Check out what network security expert Michael Gregg has to say about the subject.