nerdexam
CompTIA

CAS-002 · Question #573

The company's marketing department needs to provide more real-time interaction with its partners and consumers and decides to move forward with a presence on multiple social networking sites for…

The correct answer is B. Establish a specific set of trained people that can release information on the organization's. Restricting social media posting to a designated, trained group of representatives is the most effective control for preventing accidental or unauthorized release of proprietary information.

Integration of Computing, Communications and Business Disciplines

Question

The company's marketing department needs to provide more real-time interaction with its partners and consumers and decides to move forward with a presence on multiple social networking sites for sharing information. Which of the following minimizes the potential exposure of proprietary information?

Options

  • ARequire each person joining the company's social networking initiative to accept a
  • BEstablish a specific set of trained people that can release information on the organization's
  • CRequire a confidential statement be attached to all information released to the social
  • DEstablish a social media usage policy and provide training to all marketing employees.

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    74% (35)
  • C
    9% (4)
  • D
    13% (6)

Why each option

Restricting social media posting to a designated, trained group of representatives is the most effective control for preventing accidental or unauthorized release of proprietary information.

ARequire each person joining the company's social networking initiative to accept a

Requiring acceptance of a terms-of-service agreement does not technically prevent employees from posting proprietary information; it only creates legal liability after the fact.

BEstablish a specific set of trained people that can release information on the organization'sCorrect

Limiting authorized social media communication to a small, vetted group drastically reduces the number of individuals who can inadvertently expose proprietary data, creating a narrow and accountable information release channel. These designated representatives receive specialized training on what information is permissible, making them far less likely to make disclosure errors compared to the broader marketing staff. This principle of least privilege applied to external communications is more effective than reactive or advisory controls applied to a large population.

CRequire a confidential statement be attached to all information released to the social

Attaching a confidentiality statement to released information does not stop the information itself from being seen by unauthorized parties once it is published to a public social network.

DEstablish a social media usage policy and provide training to all marketing employees.

A usage policy and general training reduce risk but do not eliminate it, as any employee can still inadvertently post proprietary information without the tighter access control that designated representatives provide.

Concept tested: Social media information disclosure control via least privilege

Source: https://csrc.nist.gov/glossary/term/social_media

Topics

#social media policy#information disclosure#security training#data governance

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice