CAS-002 · Question #573
The company's marketing department needs to provide more real-time interaction with its partners and consumers and decides to move forward with a presence on multiple social networking sites for…
The correct answer is B. Establish a specific set of trained people that can release information on the organization's. Restricting social media posting to a designated, trained group of representatives is the most effective control for preventing accidental or unauthorized release of proprietary information.
Question
The company's marketing department needs to provide more real-time interaction with its partners and consumers and decides to move forward with a presence on multiple social networking sites for sharing information. Which of the following minimizes the potential exposure of proprietary information?
Options
- ARequire each person joining the company's social networking initiative to accept a
- BEstablish a specific set of trained people that can release information on the organization's
- CRequire a confidential statement be attached to all information released to the social
- DEstablish a social media usage policy and provide training to all marketing employees.
How the community answered
(47 responses)- A4% (2)
- B74% (35)
- C9% (4)
- D13% (6)
Why each option
Restricting social media posting to a designated, trained group of representatives is the most effective control for preventing accidental or unauthorized release of proprietary information.
Requiring acceptance of a terms-of-service agreement does not technically prevent employees from posting proprietary information; it only creates legal liability after the fact.
Limiting authorized social media communication to a small, vetted group drastically reduces the number of individuals who can inadvertently expose proprietary data, creating a narrow and accountable information release channel. These designated representatives receive specialized training on what information is permissible, making them far less likely to make disclosure errors compared to the broader marketing staff. This principle of least privilege applied to external communications is more effective than reactive or advisory controls applied to a large population.
Attaching a confidentiality statement to released information does not stop the information itself from being seen by unauthorized parties once it is published to a public social network.
A usage policy and general training reduce risk but do not eliminate it, as any employee can still inadvertently post proprietary information without the tighter access control that designated representatives provide.
Concept tested: Social media information disclosure control via least privilege
Source: https://csrc.nist.gov/glossary/term/social_media
Topics
Community Discussion
No community discussion yet for this question.