Exam CISM topic 1 question 42 discussion

Defining acceptable information for posting is crucial to set clear expectations and boundaries for employees when using social networking sites on behalf of or in association with the organization. This step helps mitigate the risks associated with inappropriate sharing of sensitive or confidential information, ensuring that employees understand what types of content are acceptable and align with the organization's policies. While the other options (identifying secure social networking sites, establishing disciplinary actions for noncompliance, and performing a vulnerability assessment) may also be important considerations, defining acceptable information for posting is foundational to creating effective and secure guidelines for social networking use within the organization.

D While the other options (A, B, and C) are important considerations, defining what information is acceptable for posting is foundational because it sets the tone and boundaries for how employees should use social networking sites in a manner that aligns with the organization's security, legal, and reputation management objectives. Once these guidelines are established, identifying secure social networking sites, establishing disciplinary actions, and performing vulnerability assessments can all follow as complementary steps in the organization's social media governance strategy.

D. any time you see disciplinary action in an answer it is not correct. That is building a bad culture in which people are afraid to speak up and is against the CISM exams' intentions.

D. Haven't seen any ISACA questions with disciplinary actions as the answer.

D. Define acceptable information for posting

guidelines are not mandatory so disciplinary action wouldn't be the right answer with B. You can define and recommend what to post though.

D. To ensure that employees understand what kind of information is appropriate to share on social networking sites and what types of information should be kept confidential. This can help to reduce the risk of data breaches, maintain the trust of customers and stakeholders, and comply with legal and ethical standards for protecting information.

D. To ensure that employees understand what kind of information is appropriate to share on social networking sites and what types of information should be kept confidential. This can help to reduce the risk of data breaches, maintain the trust of customers and stakeholders, and comply with legal and ethical standards for protecting information.

D. You can't have non-compliance with establishing acceptable use policy. Besides, use a carrot before a stick!

clearly it is D

Every guideline I have ever seen includes penalties for non-compliance such as "Termination". I don't believe it's possible to list every single piece of acceptable information to post.

d - define accept use for user

B and D. Disciplinary is more important in my opinion