CRISC · Question #268
Which of the following is the PRIMARY reason for an organization to include an acceptable use banner when users log in?
The correct answer is A. To reduce the likelihood of insider threat. An acceptable use banner primarily serves to reduce the likelihood of insider threats by clearly informing users of expected behavior and the consequences of non-compliance, thereby deterring misuse.
Question
Which of the following is the PRIMARY reason for an organization to include an acceptable use banner when users log in?
Options
- ATo reduce the likelihood of insider threat
- BTo eliminate the possibility of insider threat
- CTo enable rapid discovery of insider threat
- DTo reduce the impact of insider threat
How the community answered
(26 responses)- A92% (24)
- B4% (1)
- C4% (1)
Why each option
An acceptable use banner primarily serves to reduce the likelihood of insider threats by clearly informing users of expected behavior and the consequences of non-compliance, thereby deterring misuse.
An acceptable use banner establishes a legal and policy framework, providing explicit notice to users about authorized system usage, monitoring, and potential consequences for misuse, which acts as a deterrent and reduces the probability of intentional or unintentional insider threat activities by promoting compliance.
No single control, including an acceptable use banner, can entirely eliminate the possibility of an insider threat.
While banners contribute to a robust security posture that *aids* in discovery, their primary function is deterrent, not direct real-time detection of insider threat activity.
Reducing the impact of an insider threat typically involves incident response, data segregation, and backup measures, rather than the informational role of a login banner.
Concept tested: Acceptable use policy and insider threat mitigation
Topics
Community Discussion
No community discussion yet for this question.