Exam CISM topic 1 question 355 discussion

You first need to document requirements (answer C), then educate users (answer D), and supplement your actions through technical controls (answer A). If your efforts do not work, you may choose to avoid the risk by limiting or shutting down access to social media sites (answer B). Therefore, answer C is correct.

inadvertent, the key word, hence B, justifiable as even if users are educated on the risk on socmed, what happens if they inadvertently blurt out something?

C or D but answer "D" is part of "C" so i would go with C. Developing social media guidelines.

I agree with B. The best way to eliminate the risk is block access. Nowhere it states social media access is allowed in org/org devices

the BEST you can do is simply to block/limit access, I think B is correct here

Answer : A To prevent unintended (inadvertent) disclosure, DLP is the best solution.

Definitely D. B would only prevent them using social media on work computers in working hours and not when they're home

DLP is the BEST option. then training users

BEST one is B.

D. Educating users on social media risks

This is the right answer

B. Limiting access to social media sites --> cant be effective since user also has personal devices which are not limited. C. Developing social media guidelines --> is not too usable if the user are not aware of this document So D is the best answer.

D. Educating users on social media risks is the best way to minimize the risk of inadvertently disclosing internal business information on social media. DLP solutions can help prevent data loss, limiting access to social media sites can prevent employees from using them, but both of these methods don't prevent the employees to inadvertently disclose internal information. Developing social media guidelines can help employees understand what kind of information is appropriate to share and what isn't, but education is the key. Educating employees on the risks associated with social media use, as well as providing them with guidelines and best practices for using social media in a professional setting, can help reduce the risk of sensitive information being accidentally disclosed.

D. Educating users

DLP is not effective for user's activities. So need to educate.

(A) is correct

Educate users