nerdexam
(ISC)2

CISSP · Question #129

Which of the following MOST influences the design of the organization's electronic monitoring policies?

The correct answer is A. Workplace privacy laws. Electronic monitoring policies must be designed within the legal boundaries established by workplace privacy laws, which define what employers can and cannot monitor. Legal compliance is the primary driver of policy design.

Submitted by chiamaka_o· Mar 5, 2026Security and Risk Management

Question

Which of the following MOST influences the design of the organization's electronic monitoring policies?

Options

  • AWorkplace privacy laws
  • BLevel of organizational trust
  • CResults of background checks
  • DBusiness ethical considerations

How the community answered

(68 responses)
  • A
    82% (56)
  • B
    1% (1)
  • C
    10% (7)
  • D
    6% (4)

Why each option

Electronic monitoring policies must be designed within the legal boundaries established by workplace privacy laws, which define what employers can and cannot monitor. Legal compliance is the primary driver of policy design.

AWorkplace privacy lawsCorrect

Workplace privacy laws - such as the Electronic Communications Privacy Act (ECPA), GDPR, and various state/national regulations - establish legally enforceable boundaries on what employers may monitor, how data must be handled, and what disclosures must be made to employees. These laws directly constrain and shape the structure of electronic monitoring policies, making legal compliance the most influential factor. Violating these laws exposes the organization to significant legal liability, so policy design must reflect them above all other considerations.

BLevel of organizational trust

While organizational trust culture may inform the tone or extent of monitoring, it is a soft, internal factor that does not legally mandate specific policy requirements the way privacy laws do.

CResults of background checks

Background check results relate to pre-employment screening decisions and do not directly influence the ongoing design of electronic monitoring policies for the workforce.

DBusiness ethical considerations

Business ethical considerations are important for guiding acceptable behavior but are subjective and secondary to legal requirements, which impose binding, enforceable constraints on monitoring policy design.

Concept tested: Legal compliance in electronic monitoring policy design

Source: https://www.dol.gov/general/topic/workhours/electronic-monitoring

Topics

#privacy laws#electronic monitoring#security policies#legal compliance

Community Discussion

No community discussion yet for this question.

Full CISSP Practice