CISM Question 354

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  The answer sheould be B since it is mentioned that it was "inadvertent" disclosure. Option C and D are in situations where someone knowingly disclosed information in social media. In which case they need to be educated.

• 1

  You first need to document requirements (answer C), then educate users (answer D), and supplement your actions through technical controls (answer A). If your efforts do not work, you may choose to avoid the risk by limiting or shutting down access to social media sites (answer B). Therefore, answer C is correct.

• 1

  inadvertent, the key word, hence B, justifiable as even if users are educated on the risk on socmed, what happens if they inadvertently blurt out something?