Certified Information Security Manager CISM · Free Practice Question Medium
Question 3
-
A
Conduct a risk assessment to determine what risks exist and what actions are warranted.
-
B
Permit employees of all ages to log in to their social media sites during working hours.
-
C
Update policy to permit a reasonable amount of social media sites at work.
-
D
Discipline employees who are conducting personal business on company time and with company resources.
Reveal correct answer
Correct answer: A
Explanation
Correct Answer:
"Conduct a risk assessment to determine what risks exist and what actions are warranted." is correct. Before taking action, it is first important to understand what specific risks may exist.
Incorrect Answers:
"Permit employees of all ages to log in to their social media sites during working hours." is incorrect because this activity may represent unacceptable risk.
"Discipline employees who are conducting personal business on company time and with company resources." is incorrect because this may run contrary to organization culture.
"Update policy to permit a reasonable amount of social media sites at work." is incorrect because this conclusion cannot be reached until a risk assessment has been performed.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
