An information security manager is planning to introduce generative AI tools to the organization's developer community. Which of the following is MOST important before rolling out the new system?

The correct answer is A. Creating an organization-wide generative AI policy. Establishing an organization-wide generative AI policy is most important because it sets enforceable rules for acceptable use, data handling (e.g., prohibiting sensitive code/data submission), IP and privacy considerations, and governance expectations - providing the control…

Submitted by diego_uy· Apr 18, 2026Information Security Governance

Question

Options

ACreating an organization-wide generative AI policy
BIdentifying access requirements
CDeveloping a communication plan
DConducting AI training for developers

How the community answered

(48 responses)

A
81% (39)
B
4% (2)
C
4% (2)
D
10% (5)

Explanation

Establishing an organization-wide generative AI policy is most important because it sets enforceable rules for acceptable use, data handling (e.g., prohibiting sensitive code/data submission), IP and privacy considerations, and governance expectations - providing the control framework that must exist before access, communications, and training can be executed safely.

Topics

#Generative AI Security Policy#Information Security Governance#Technology Adoption#Policy Development

Community Discussion

No community discussion yet for this question.

Full CISM Practice