CISM · Question #706
An acceptable use policy would PRIMARILY address the integration of an emerging technology in the workplace by:
The correct answer is D. providing guidelines for responsible adoption and use of the emerging technology. An Acceptable Use Policy (AUP) is a governance document that defines how users should behave when using organizational resources - so when a new technology enters the workplace, the AUP's role is to set guidelines for responsible adoption and use, making D correct. Why the…
Question
An acceptable use policy would PRIMARILY address the integration of an emerging technology in the workplace by:
Options
- Aproviding implementation plans for the emerging technology.
- Boutlining risk mitigation actions for the emerging technology.
- Cproviding direction on access privileges and authentication standards
- Dproviding guidelines for responsible adoption and use of the emerging technology.
How the community answered
(30 responses)- A3% (1)
- B13% (4)
- C7% (2)
- D77% (23)
Explanation
An Acceptable Use Policy (AUP) is a governance document that defines how users should behave when using organizational resources - so when a new technology enters the workplace, the AUP's role is to set guidelines for responsible adoption and use, making D correct.
Why the distractors are wrong:
- A is wrong because implementation plans belong in project/deployment documentation, not a policy document.
- B is wrong because risk mitigation actions belong in a risk management plan or risk register, not an AUP.
- C is wrong because access privileges and authentication standards belong in an access control policy or identity management policy - a more specific, technical document.
Memory tip: Think of an AUP as a "rules of the road" document - it tells you how to drive, not how to build the road (A), how to handle accidents (B), or who gets a driver's license (C).
Topics
Community Discussion
No community discussion yet for this question.