nerdexam
Isaca

CRISC · Question #203

Which of the following s MOST likely to deter an employee from engaging in inappropriate use of company owned IT systems?

The correct answer is D. Communication of employee activity monitoring. The most effective deterrent against employees engaging in inappropriate use of company IT systems is communicating that their activities are monitored.

Submitted by kwame.gh· Apr 18, 2026Risk Response and Reporting

Question

Which of the following s MOST likely to deter an employee from engaging in inappropriate use of company owned IT systems?

Options

  • AA centralized computer security response team
  • BRegular performance reviews and management check-ins
  • CCode of ethics training for all employees
  • DCommunication of employee activity monitoring

How the community answered

(13 responses)
  • A
    8% (1)
  • B
    15% (2)
  • D
    77% (10)

Why each option

The most effective deterrent against employees engaging in inappropriate use of company IT systems is communicating that their activities are monitored.

AA centralized computer security response team

A centralized computer security response team primarily focuses on responding to incidents *after* they occur, which is not a proactive deterrent for preventing inappropriate use.

BRegular performance reviews and management check-ins

Regular performance reviews and management check-ins are primarily for employee development and performance management, not specifically designed to deter inappropriate IT system usage.

CCode of ethics training for all employees

While important for establishing ethical guidelines, code of ethics training alone may not deter an employee if there is no perceived likelihood of detection and consequences for violations.

DCommunication of employee activity monitoringCorrect

The explicit communication that employee activity on company systems is monitored creates a strong perception of detection, which is a powerful psychological deterrent. This awareness discourages employees from engaging in unauthorized or inappropriate actions due to the increased risk of being discovered and held accountable.

Concept tested: Employee monitoring as a deterrent

Source: https://learn.microsoft.com/en-us/compliance/assurance/assurance-employee-monitoring

Topics

#Deterrence#Employee Monitoring#Risk Mitigation#Security Controls

Community Discussion

No community discussion yet for this question.

Full CRISC Practice