nerdexam
CompTIA

CAS-003 · Question #515

A company's Chief Operating Officer (COO) is concerned about the potential for competitors to infer proprietary information gathered from employees' social media accounts. Which of the following…

The correct answer is A. Utilize insider threat consultants to provide expertise. Insider threat consultants are third-party specialists who can objectively assess an organization's overall exposure from social media - evaluating policies, patterns, and aggregate risk - without singling out individual employees or violating their privacy. This provides an…

Risk Management

Question

A company's Chief Operating Officer (COO) is concerned about the potential for competitors to infer proprietary information gathered from employees' social media accounts. Which of the following methods should the company use to gauge its social media threat level without targeting individual employees?

Options

  • AUtilize insider threat consultants to provide expertise.
  • BRequire that employees divulge social media accounts.
  • CLeverage Big Data analytical algorithms.
  • DPerform social engineering tests to evaluate employee awareness.

How the community answered

(57 responses)
  • A
    82% (47)
  • B
    2% (1)
  • C
    7% (4)
  • D
    9% (5)

Explanation

Insider threat consultants are third-party specialists who can objectively assess an organization's overall exposure from social media - evaluating policies, patterns, and aggregate risk - without singling out individual employees or violating their privacy. This provides an expert, impartial threat assessment. Requiring employees to disclose their accounts directly targets individuals and raises privacy and morale concerns. Big Data algorithms, while capable of aggregate analysis, still process personal data and can inadvertently profile individuals. Social engineering tests evaluate awareness training effectiveness, not the organization's social media threat surface.

Topics

#social media risk#insider threat#OSINT#data leakage

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice