“Wait and see” is not a good strategy for your social networking policy