GCIH · Question #415
As an employee of Enfield & Sons, you have been tasked with adding a warning banner to computer systems. You develop the below warning banner. What should be your next step? 'Warning! Protected…
The correct answer is D. Have your legal department review the banner. Before deploying a warning banner that includes legal language about penalties, monitoring, and law enforcement reporting, the organization's legal department must review it for enforceability and legal accuracy.
Question
As an employee of Enfield & Sons, you have been tasked with adding a warning banner to computer systems. You develop the below warning banner. What should be your next step? 'Warning! Protected System of Enfield & Sons Access to this system is limited to authorized activity by Enfield's personnel. By accessing this system, you agree that your actions can be monitored and recorded. Any unauthorized access, use, or modification is prohibited and unauthorized users may face criminal or civil penalties. Any criminal activity will be reported to law enforcement.'
Options
- AApply the banner to all systems
- BApply the banner to protected systems
- CHave local law enforcement review the banner
- DHave your legal department review the banner
How the community answered
(43 responses)- A2% (1)
- B2% (1)
- D95% (41)
Why each option
Before deploying a warning banner that includes legal language about penalties, monitoring, and law enforcement reporting, the organization's legal department must review it for enforceability and legal accuracy.
Applying the banner to all systems before legal review risks deploying language that is legally flawed, unenforceable, or exposes the company to liability.
Applying the banner only to protected systems still bypasses the required legal review of content containing penalty and monitoring disclosures.
Law enforcement agencies do not review or pre-approve corporate warning banner content; that responsibility belongs to the organization's own legal counsel.
A warning banner referencing criminal or civil penalties, mandatory activity monitoring, and law enforcement reporting carries significant legal weight and potential organizational liability. The legal department must validate that the language is enforceable under applicable laws, does not inadvertently waive the organization's rights, and complies with relevant jurisdictions before the banner is deployed anywhere.
Concept tested: Legal review requirement for warning banner deployment
Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.