220-1002 · Question #251
Which of the following should be enacted to reduce a company's liability and exposure to a potential lawsuit?
The correct answer is A. Acceptable use policy. An Acceptable Use Policy (AUP) formally defines what users are and are not permitted to do with company resources (computers, networks, internet, data). By having employees acknowledge and sign an AUP, the company establishes clear boundaries of acceptable behavior and creates…
Question
Which of the following should be enacted to reduce a company's liability and exposure to a potential lawsuit?
Options
- AAcceptable use policy
- BIncident documentation policy
- CPassword compliance policy
- DChange control policy
How the community answered
(44 responses)- A93% (41)
- C2% (1)
- D5% (2)
Explanation
An Acceptable Use Policy (AUP) formally defines what users are and are not permitted to do with company resources (computers, networks, internet, data). By having employees acknowledge and sign an AUP, the company establishes clear boundaries of acceptable behavior and creates legal documentation that shifts liability to the employee if they violate the policy. Incident documentation (B) helps after an event occurs but does not proactively reduce liability. Password compliance (C) is a security control, not a legal liability instrument. Change control (D) manages IT changes but does not directly address legal exposure from user behavior.
Topics
Community Discussion
No community discussion yet for this question.