Joe, a newly hired employee, has a corporate workstation that has been compromised due to several visits to P2P sites. Joe insisted that he was not aware of any company policy that prohibits the use…

The correct answer is A. Acceptable Use Policy. An Acceptable Use Policy (AUP) explicitly defines what constitutes permitted and prohibited use of company IT resources, including workstations, the internet, and specific categories of websites such as P2P file-sharing sites. Employees are typically required to read and sign…

Security program management and oversight

Question

Joe, a newly hired employee, has a corporate workstation that has been compromised due to several visits to P2P sites. Joe insisted that he was not aware of any company policy that prohibits the use of such web sites. Which of the following is the BEST method to deter employees from the improper use of the company's information systems?

Options

AAcceptable Use Policy
BPrivacy Policy
CSecurity Policy
DHuman Resource Policy

How the community answered

(24 responses)

A
92% (22)
B
4% (1)
D
4% (1)

Explanation

An Acceptable Use Policy (AUP) explicitly defines what constitutes permitted and prohibited use of company IT resources, including workstations, the internet, and specific categories of websites such as P2P file-sharing sites. Employees are typically required to read and sign the AUP at onboarding, establishing that they are aware of the rules - directly addressing Joe's claim of ignorance and deterring future misuse. A Privacy Policy governs how the company handles personal data. A Security Policy is a high-level governance document that may not specify user behavior in enough detail. An HR Policy covers employment terms and conduct, not IT usage specifics. The AUP is the most targeted and direct deterrent for this scenario.

Topics

#acceptable use policy#user policy#policy enforcement#P2P restrictions

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice