CAS-002 · Question #765
The Chief Executive Officer (CEO) of a small start-up company wants to set up offices around the country for the sales staff to generate business. The company needs an effective communication…
The correct answer is B. Social media is an ineffective solution because the policy may not align with the business. Free social media platforms are an ineffective business communication solution primarily because their terms of service, data handling practices, and security controls may not align with the company's security and acceptable-use policies.
Question
The Chief Executive Officer (CEO) of a small start-up company wants to set up offices around the country for the sales staff to generate business. The company needs an effective communication solution to remain in constant contact with each other, while maintaining a secure business environment. A junior-level administrator suggests that the company and the sales staff stay connected via free social media. Which of the following decisions is BEST for the CEO to make?
Options
- ASocial media is an effective solution because it is easily adaptable to new situations.
- BSocial media is an ineffective solution because the policy may not align with the business.
- CSocial media is an effective solution because it implements SSL encryption.
- DSocial media is an ineffective solution because it is not primarily intended for business
How the community answered
(39 responses)- A3% (1)
- B95% (37)
- D3% (1)
Why each option
Free social media platforms are an ineffective business communication solution primarily because their terms of service, data handling practices, and security controls may not align with the company's security and acceptable-use policies.
Adaptability is not a security or business justification; it does not address confidentiality, compliance, or acceptable-use requirements.
Corporate security and acceptable-use policies govern what tools employees may use for business communication, and free social media services are typically designed for personal use with terms that allow the provider to collect, store, and monetize user data. This creates compliance, data-leakage, and intellectual-property risks that conflict with standard business security policies. A CEO must ensure that any communication platform meets the organization's policy requirements, not just technical convenience.
Not all social media services implement SSL uniformly across all endpoints, and SSL alone does not address data ownership, policy compliance, or access control concerns.
While social media is not primarily designed for business use, this is a weaker argument than the policy-alignment issue in B, which is the root security concern.
Concept tested: Security policy alignment for business communication tools
Source: https://csrc.nist.gov/publications/detail/sp/800-114/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.