CAS-002 · Question #137
An administrator is notified that contract workers will be onsite assisting with a new project. The administrator wants each worker to be aware of the corporate policy pertaining to USB storage…
The correct answer is C. Business Partnership Agreement. Contract workers should review the Business Partnership Agreement before starting work, as it formally establishes the rules, responsibilities, and corporate security policies - including acceptable use of storage devices - that govern their engagement.
Question
An administrator is notified that contract workers will be onsite assisting with a new project. The administrator wants each worker to be aware of the corporate policy pertaining to USB storage devices. Which of the following should each worker review and understand before beginning work?
Options
- AInterconnection Security Agreement
- BMemorandum of Understanding
- CBusiness Partnership Agreement
- DNon-Disclosure Agreement
How the community answered
(20 responses)- B5% (1)
- C95% (19)
Why each option
Contract workers should review the Business Partnership Agreement before starting work, as it formally establishes the rules, responsibilities, and corporate security policies - including acceptable use of storage devices - that govern their engagement.
An Interconnection Security Agreement governs the security requirements for data exchanged between two interconnected IT systems, not the individual behavioral policies of onsite workers.
A Memorandum of Understanding documents a general agreement of intent between organizations but lacks the specific contractual policy obligations needed to bind contractors to security rules.
A Business Partnership Agreement defines the terms of the working relationship between a company and its contractors, including security requirements and behavioral policies such as restrictions on USB storage device use. Reviewing the BPA ensures contract workers are formally informed of and bound by corporate policies before they access company systems or facilities.
A Non-Disclosure Agreement addresses confidentiality of proprietary information but does not cover acceptable use policies or restrictions on removable storage media.
Concept tested: Business Partnership Agreement for contractor security policy enforcement
Source: https://csrc.nist.gov/publications/detail/sp/800-12/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.