nerdexam
Isaca

CISM · Question #606

In an organization that has an established social media policy, which of the following is the BEST way to reduce the risk associated with personally identifiable information (PII) disclosure?

The correct answer is D. Delivering regular training to employees about social media usage. Regular training ensures employees understand the risks and responsibilities related to PII disclosure on social media, reinforcing policy compliance and promoting secure behavior.

Submitted by fatema_kw· Apr 18, 2026Information Security Risk Management

Question

In an organization that has an established social media policy, which of the following is the BEST way to reduce the risk associated with personally identifiable information (PII) disclosure?

Options

  • AMonitoring employees' social media usage for confidential content
  • BControlling access to PII within the organization
  • CBlocking social media sites on the corporate network
  • DDelivering regular training to employees about social media usage

How the community answered

(33 responses)
  • A
    12% (4)
  • B
    3% (1)
  • C
    6% (2)
  • D
    79% (26)

Explanation

Regular training ensures employees understand the risks and responsibilities related to PII disclosure on social media, reinforcing policy compliance and promoting secure behavior.

Topics

#Social Media Security#PII Protection#Employee Training#Risk Mitigation

Community Discussion

No community discussion yet for this question.

Full CISM Practice