CAS-001 · Question #484
A security administrator was recently hired in a start-up company to represent the interest of security and to assist the network team in improving security in the company. The sales team is…
The correct answer is D. Compile a list of the questions, develop an FAQ on the website, and train the sales team about. Developing an FAQ and training the sales team creates a self-service reference that eliminates repeated requests at the source, providing the most scalable and sustainable reduction in contact frequency.
Question
A security administrator was recently hired in a start-up company to represent the interest of security and to assist the network team in improving security in the company. The sales team is continuously contacting the security administrator to answer security questions posed by potential customers/clients. Which of the following is the BEST strategy to minimize the frequency of these requests?
Options
- ARequest the major stakeholder hire a security liaison to assist the sales team with security-related
- BTrain the sales team about basic security, and make them aware of the security policies and
- CThe job description of the security administrator is to assist the sales team; thus the process
- DCompile a list of the questions, develop an FAQ on the website, and train the sales team about
How the community answered
(35 responses)- A6% (2)
- B11% (4)
- C3% (1)
- D80% (28)
Why each option
Developing an FAQ and training the sales team creates a self-service reference that eliminates repeated requests at the source, providing the most scalable and sustainable reduction in contact frequency.
Requesting a security liaison simply redirects questions to a different person rather than building a self-service resource, so the volume of requests across the organization is not materially reduced.
Training alone without a persistent reference document still results in sales staff contacting the security administrator when they cannot recall specifics, providing only a partial reduction.
Accepting the current interaction as part of the job description does nothing to minimize request frequency and conflicts with the stated goal of reducing the burden on the security administrator.
Compiling recurring questions into a published FAQ empowers the sales team to resolve routine security inquiries independently without contacting the security administrator each time, directly addressing the root cause of the high request volume. Pairing the FAQ with training ensures staff know how to use the resource and when to escalate genuinely novel questions, combining self-service access with competency in a low-overhead, repeatable solution.
Concept tested: Scaling security support through documentation and awareness training
Source: https://csrc.nist.gov/publications/detail/sp/800-50/final
Topics
Community Discussion
No community discussion yet for this question.