nerdexam
Isaca

CISM · Question #706

An acceptable use policy would PRIMARILY address the integration of an emerging technology in the workplace by:

The correct answer is D. providing guidelines for responsible adoption and use of the emerging technology. An Acceptable Use Policy (AUP) is a governance document that defines how users should behave when using organizational resources - so when a new technology enters the workplace, the AUP's role is to set guidelines for responsible adoption and use, making D correct. Why the…

Submitted by chen.hong· Apr 18, 2026Information Security Program Development and Management

Question

An acceptable use policy would PRIMARILY address the integration of an emerging technology in the workplace by:

Options

  • Aproviding implementation plans for the emerging technology.
  • Boutlining risk mitigation actions for the emerging technology.
  • Cproviding direction on access privileges and authentication standards
  • Dproviding guidelines for responsible adoption and use of the emerging technology.

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    13% (4)
  • C
    7% (2)
  • D
    77% (23)

Explanation

An Acceptable Use Policy (AUP) is a governance document that defines how users should behave when using organizational resources - so when a new technology enters the workplace, the AUP's role is to set guidelines for responsible adoption and use, making D correct.

Why the distractors are wrong:

  • A is wrong because implementation plans belong in project/deployment documentation, not a policy document.
  • B is wrong because risk mitigation actions belong in a risk management plan or risk register, not an AUP.
  • C is wrong because access privileges and authentication standards belong in an access control policy or identity management policy - a more specific, technical document.

Memory tip: Think of an AUP as a "rules of the road" document - it tells you how to drive, not how to build the road (A), how to handle accidents (B), or who gets a driver's license (C).

Topics

#Acceptable Use Policy (AUP)#Emerging Technology#Information Security Policy#User Responsibility

Community Discussion

No community discussion yet for this question.

Full CISM Practice