9. A bank must find ways to manage and control employee participation on the bank social media sites. If there are no established policies and training to address employee participation on social media, what could result? A. If the employee has many ''friends,'' the bank could potentially get more customers, so the bank should not be concerned B. Nothing would happen. What employees do on their own time is their own business C. The employee might say or do something illegal, but it is not on the bank's page, so it does not really matter D. An employee could possibly subject the bank to compliance risk and operational risk as well as reputational risk