If the identity of the person who posted derogatory comments about it on a social networking site is unknown, what should the employer do?