Certified Information Systems Auditor CISA · Free Practice Question Easy
Question 19
You are an information system auditor of HDA Inc. You are auditing and have identified that a company executive is promoting employee use of social networking sites for business purposes. From the options provided, which recommendation would be the most effective in minimizing the risk of data leakage?
- A A. Implement a strict ban on employee access to social networking sites.
- B B. Install network monitoring software to track employee activities on social networking sites.
- C C. Provide frequent awareness training for the proper use of social media sites.
- D D. Restrict employee access to the internet during work hours.
Reveal correct answer
Correct answer: C
Explanation
Correct Answer: C. Frequent awareness training for the use of social media sites. Explanation: In this scenario, the company executive is encouraging employee use of social networking sites for business purposes. While social media can provide valuable communication and networking opportunities, it also carries the risk of data leakage if not used properly. Implementing a strict ban on employee access to social networking sites (option A) may seem like a solution, but it can hinder legitimate business activities and may not be practical in all cases. Installing network monitoring software (option B) can help track employee activities on social networking sites, but it does not directly address the risk of data leakage. It primarily focuses on monitoring and detection, rather than prevention. Restricting employee access to the internet during work hours (option D) can limit exposure to social media sites but may also restrict legitimate business needs that require internet access. The most effective recommendation in this scenario is to provide frequent awareness training for the proper use of social media sites (option C). This training should educate employees about the risks associated with social networking sites, best practices for data protection, and the organization's policies regarding the use of social media for business purposes. By promoting awareness and providing guidance, employees can make informed decisions and take appropriate measures to reduce the risk of data leakage while leveraging the benefits of social networking sites for business purposes. In summary, while options A, B, and D address the issue of employee access to social networking sites, they do not provide the most effective solution for reducing the risk of data leakage. Option C, frequent awareness training for the use of social media sites, is the best recommendation as it educates employees on the proper use of social media, data protection practices, and the organization's policies, thereby mitigating the risk of data leakage.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
