This 3 sentence summary provides the key details from the Risk Assessment Checklist for using social media and digital tools: The checklist aims to ensure projects properly assess and mitigate risks of sharing information online, and that senior leadership acknowledges the accepted level of risk. It includes questions about individual staff risks, information security risks, technical details, facilitation and moderation, as well as ensuring awareness across relevant communications, IT, and compliance teams. Completing the checklist helps discuss the project with those teams to get input on the approach before keeping it on file.

1. Risk Assessment Checklist for the use of
Social Media and Digital Technology Tools
This checklist aims to ensure that when a new project is initiated which involves sharing or distributing
information online, we have properly assessed and mitigated risk where possible, and that there is senior
acknowledgement and support for the level of risk we are accepting.
• Please fill in what you can – it’s OK to leave blanks, but please use these as a prompt to discuss
the issue with relevant colleagues in Corporate Communications.
• If you have taken some steps to mitigate risks, describe them here
• Think carefully about the potential impact of the project: could it cause real harm to the Council’s
reputation or operation, or simply short term embarrassment?
• Importantly, please ensure this assessment is discussed with the senior sponsor for the project, so
they are aware of the proposed approach and risk mitigation in place.
Background to the project
1. Your name and contact details (phone/email):
2. In a sentence or two, what are you trying to achieve?
3. Who are the intended audiences? e.g. internal Council staff, limited to trusted external
stakeholders, open to wider public etc
4. How long will it run for? e.g. between specific dates, indefinitely etc
Individual risk
5. Will staff be expected to use their personal social media accounts for the county council
business: E.g. facebook provides the facility for “pages” where an individual can administer a page
using their personal profile!
6. How will the privacy of the individual member of staff be respected and managed? Will
personal or sensitive information about staff by protected
7. Does the avatar or profile picture for the member(s) of staff concerned maintain the
professionalism of the council? Does the picture include references to alcohol or contain pictures or
children or family?.
8. Does your intended audience consist of children, young people or vulnerable adults?

2. 9. If yes, has a formal risk assessment been completed. An example of good practice can be
found here (http://geturvoiceheard.co.uk/docs_sn.php)
10. Are the staff planning to use this channel been through Disclosure?
Information risk
1. How will access to the information be controlled – who will have access to administer the tool
or website, manage users etc?
2. What would the impact be if the information were revealed publicly? If the information is
confidential or commercially sensitive, please give details
3. What would the impact be if the information were changed without authorisation or defaced
maliciously?
4. What would the impact be if the information were not available for an extended period?
Technical details
5. What technology are you planning to use? i.e. name of web-based tools etc
6. Where will the information be hosted/stored? Do you know if the tool/provider is UK-based?
7. Who will provide support/help to users?
8. Who is able to provide technical advice on the tool and maintain it in future?
9. What do you have in place to back up the information in the short term, and archive it long
term for the future if appropriate?
Facilitation / Moderation
1. Have you identified suitably skilled individuals to act as the facilitators or moderators for the
given channel(s)?

3. 2. Have they read through the social media policy document, in particular Section Two: Guidance
and tips on using social media in different scenarios:
3. If applicable, please provide the contact details of the facilitators and moderators for your
project
Awareness and involvement of others
4. Please describe how the project is owned and managed in the Council:
a. Member sponsor/owner:
b. Senior owner:
c. Information Asset Owner:
d. Day to day responsibility:
e. Others involved:
5. Has the tool/service been bought according to the Councils procurement rules?
6. Have you discussed this project with the following? (n.b. it may be OK if you haven’t, but
please indicate if you have)
a. Corporate Communications
a.1. Web & Digital Communications Team
a.2. Communications and Marketing
a.3. Press Office
b. ICT
c. Strategic Intelligence
c.1. Information Compliance
c.2. Consultation & Engagement
What next?
Thank you for completing this assessment. You should discuss it with the relevant colleagues listed above
as appropriate, to ensure they are aware and comfortable with the approach you have taken. For your
own records, you should keep this assessment with your other project files.
If you have any questions about this assessment, or would like to get advice or help on this
project, please contact the Web & Digital Communications Team