(ISC)2 Certified in Cybersecurity Practice Exam

Aphrodite’s discovery of a colleague violating the acceptable use policy should lead her to do what?

1. Inform (ISC)²

2. Inform law enforcement

3. Inform Triffid management

4. Nothing

The correct answer is: Inform Triffid management

When a colleague is discovered violating an acceptable use policy, the most appropriate action is to inform management, in this case, Triffid management. Management is responsible for overseeing the organization's policies and procedures, and informing them allows for an appropriate investigation and response to the violation. Management can take the necessary steps to address the situation, which might include disciplinary action, further training, or revising existing policies to prevent future violations. This approach promotes a compliant and secure work environment, where issues are handled at the appropriate level within the organization. In contrast, informing (ISC)² or law enforcement may not be warranted unless the violation poses a serious security risk or legal concern, which is not typically the immediate response required for a breach of acceptable use policy. Doing nothing would neglect the responsibility to address and rectify inappropriate behavior in the workplace. Thus, informing management balances accountability with the needs of the organization.