MacDonnell Ulsch, director of technology risk management and privacy at Jefferson Wells Inc., a Boston-based consulting firm, cautioned that many companies are rushing to use Web 2.0 technologies like blogs without adequately assessing the risks. For example, employees could inadvertently post confidential company information on blogs or an employee could give out information about the company that could be used by a hacker to socially engineer his way into a company's IT systems, he said.

"Companies are scaling the technologies among the workforce without understanding the risk or the legal implications," he said. "What do you really gain if you improve your business processes if in doing that you actually create more risk?"