The company's marketing department needs to provide more real-time interaction with its partners and consumers and decides to move forward with a presence on multiple social networking sites for…

Question

Options

• ARequire each person joining the company's social networking initiative to accept a non-disclosure
• BEstablish a specific set of trained people that can release information on the organization's behalf.
• CRequire a confidential statement be attached to all information released to the social networking sites.
• DEstablish a social media usage policy and provide training to all marketing employees.

• A
  7% (2)
• B
  73% (22)
• C
  3% (1)
• D
  17% (5)

Explanation

Designating a specific, trained group of people as the authorized spokespersons for the organization on social media is the most effective control. It reduces the attack surface by limiting who can post to a small, vetted set of individuals who understand what is and is not appropriate to share. This is a process control that directly prevents unauthorized disclosure at the source. Option A (NDA) creates a legal obligation after the fact but does not prevent accidental disclosure. Option C (attaching a confidential statement) is a labeling measure that does not stop information from spreading once posted. Option D (policy and training) is important but is a supporting control - without restricting who can post, training alone cannot guarantee that no proprietary information leaks.

No community discussion yet for this question.