CISM Question 215

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  B. Develop a guideline on the acceptable use of social media. This helps ensure that employees understand how to use these platforms in a manner that supports the organization's promotional goals while also protecting sensitive information and adhering to company policies and standards. Creating clear, comprehensive guidelines will clarify what is considered appropriate and inappropriate behavior on social media for all employees. It addresses potential security risks and ensures consistent messaging and branding across employee social media interactions. These guidelines will serve as the foundation for further security measures, informing the contents of a security awareness program, the parameters of content filtering solutions if needed, and the rationale for investing in DLP tools. Once the guidelines have been established, reinforcing them through a security awareness program!

• 1

  if they are encouraging to use and not "thinking about using" it means that the social media AUP is already developed. I got the answer wrong too but now I see how A is correct

• Chose B2

  B - AUP is needed so user know what to and not to do. Training is based on guild line