CISM Question 42

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  Defining acceptable information for posting is crucial

• Chose D1

  Defining acceptable information for posting is crucial to set clear expectations and boundaries for employees when using social networking sites on behalf of or in association with the organization. This step helps mitigate the risks associated with inappropriate sharing of sensitive or confidential information, ensuring that employees understand what types of content are acceptable and align with the organization's policies. While the other options (identifying secure social networking sites, establishing disciplinary actions for noncompliance, and performing a vulnerability assessment) may also be important considerations, defining acceptable information for posting is foundational to creating effective and secure guidelines for social networking use within the organization.

• 1

  D While the other options (A, B, and C) are important considerations, defining what information is acceptable for posting is foundational because it sets the tone and boundaries for how employees should use social networking sites in a manner that aligns with the organization's security, legal, and reputation management objectives. Once these guidelines are established, identifying secure social networking sites, establishing disciplinary actions, and performing vulnerability assessments can all follow as complementary steps in the organization's social media governance strategy.