nerdexam
EXIN

ISFS · Question #61

You are the owner of the courier company SpeeDelivery. You employ a few people who, while waiting to make a delivery, can carry out other tasks. You notice, however, that they use this time to send…

The correct answer is B. Drafting a code of conduct for the use of the Internet and e-mail in which the rights and obligations of both. Option B is correct because a code of conduct is the most comprehensive and legally sound way to regulate employee behavior around Internet and email use. It establishes clear rules, sets expectations for both parties, defines consequences for violations, and creates a…

Organizational controls

Question

You are the owner of the courier company SpeeDelivery. You employ a few people who, while waiting to make a delivery, can carry out other tasks. You notice, however, that they use this time to send and read their private mail and surf the Internet. In legal terms, in which way can the use of the Internet and e-mail facilities be best regulated?

Options

  • AInstalling an application that makes certain websites no longer accessible and that filters attachments in e-
  • BDrafting a code of conduct for the use of the Internet and e-mail in which the rights and obligations of both
  • CImplementing privacy regulations
  • DInstalling a virus scanner

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    78% (21)
  • C
    15% (4)
  • D
    4% (1)

Explanation

Option B is correct because a code of conduct is the most comprehensive and legally sound way to regulate employee behavior around Internet and email use. It establishes clear rules, sets expectations for both parties, defines consequences for violations, and creates a documented agreement that can be enforced - covering the relationship between employer and employee, not just the technology.

Why the others fall short:

  • A (blocking/filtering software) is a technical control, not a legal regulation - it restricts access but doesn't address rights, obligations, or dispute resolution, and could infringe on privacy without a policy backing it.
  • C (privacy regulations) protects employees' personal data from the employer; it doesn't regulate employee behavior or govern how company resources are used.
  • D (virus scanner) is purely a security tool - it guards against malware but does nothing to regulate how or when employees use the Internet or email.

Memory tip: Think of the four options as lock, law, shield, and guard. Only the law (code of conduct) actually governs behavior - locks, shields, and guards are tools, not rules.

Topics

#acceptable use policy#code of conduct#internet use#email policy

Community Discussion

No community discussion yet for this question.

Full ISFS Practice