nerdexam
GIAC

GCIH · Question #415

As an employee of Enfield & Sons, you have been tasked with adding a warning banner to computer systems. You develop the below warning banner. What should be your next step? 'Warning! Protected…

The correct answer is D. Have your legal department review the banner. Before deploying a warning banner that includes legal language about penalties, monitoring, and law enforcement reporting, the organization's legal department must review it for enforceability and legal accuracy.

Incident Response & Cyber Kill Chain

Question

As an employee of Enfield & Sons, you have been tasked with adding a warning banner to computer systems. You develop the below warning banner. What should be your next step? 'Warning! Protected System of Enfield & Sons Access to this system is limited to authorized activity by Enfield's personnel. By accessing this system, you agree that your actions can be monitored and recorded. Any unauthorized access, use, or modification is prohibited and unauthorized users may face criminal or civil penalties. Any criminal activity will be reported to law enforcement.'

Options

  • AApply the banner to all systems
  • BApply the banner to protected systems
  • CHave local law enforcement review the banner
  • DHave your legal department review the banner

How the community answered

(43 responses)
  • A
    2% (1)
  • B
    2% (1)
  • D
    95% (41)

Why each option

Before deploying a warning banner that includes legal language about penalties, monitoring, and law enforcement reporting, the organization's legal department must review it for enforceability and legal accuracy.

AApply the banner to all systems

Applying the banner to all systems before legal review risks deploying language that is legally flawed, unenforceable, or exposes the company to liability.

BApply the banner to protected systems

Applying the banner only to protected systems still bypasses the required legal review of content containing penalty and monitoring disclosures.

CHave local law enforcement review the banner

Law enforcement agencies do not review or pre-approve corporate warning banner content; that responsibility belongs to the organization's own legal counsel.

DHave your legal department review the bannerCorrect

A warning banner referencing criminal or civil penalties, mandatory activity monitoring, and law enforcement reporting carries significant legal weight and potential organizational liability. The legal department must validate that the language is enforceable under applicable laws, does not inadvertently waive the organization's rights, and complies with relevant jurisdictions before the banner is deployed anywhere.

Concept tested: Legal review requirement for warning banner deployment

Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

Topics

#warning banner#legal review#security policy#compliance

Community Discussion

No community discussion yet for this question.

Full GCIH Practice