If an organization were to monitor their employees' e-mail, it should not:

The correct answer is A. Monitor only a limited number of employees. Selective or targeted monitoring of only some employees is problematic legally and ethically - it can constitute discriminatory treatment and expose the organization to legal liability. Best practice requires that monitoring policies apply uniformly to all employees. The…

Submitted by fatima_kr· Apr 18, 2026Security Concepts and Practices

Question

If an organization were to monitor their employees' e-mail, it should not:

Options

AMonitor only a limited number of employees.
BInform all employees that e-mail is being monitored.
CExplain who can read the e-mail and how long it is backed up.
DExplain what is considered an acceptable use of the e-mail system.

How the community answered

(54 responses)

A
81% (44)
B
11% (6)
C
2% (1)
D
6% (3)

Explanation

Selective or targeted monitoring of only some employees is problematic legally and ethically - it can constitute discriminatory treatment and expose the organization to legal liability. Best practice requires that monitoring policies apply uniformly to all employees. The organization SHOULD inform all employees monitoring is occurring (B), explain who has access and retention periods (C), and define acceptable use (D) - these are all proper components of a legally defensible, ethical monitoring program. Selective monitoring without cause is the one practice that should be avoided.

Topics

#Organizational Security Policy#Employee Monitoring#Ethics#Privacy

Community Discussion

No community discussion yet for this question.

Full SSCP Practice