Dan is the Chief Information Officer for Humphrey Company, and he is reviewing security-related policies for the organization. Humphrey Company collects a wide array of data from its employees and understands the importance of it. Which of the following is an example of an appropriate policy or practice based on the principles of proper data usage?
A) Employees disclose any security breach to management within five minutes of its initial discovery.
B) Employees keep passwords documented in an easily accessible place in case they are out of the office and someone else needs to access their accounts.
C) Employees submit their social media passwords to management so the organization can protect its online integrity.
D) Employers get access to personal files on each employee from human resources when they suspect malfeasance.

Question

Quizplus · Accepted Answer

This question requires familiarity with the three broad principles of proper data usage and how they guide decision makers' treatment of sensitive data. Choice A is correct since it is a policy that strives to protect the integrity of the company's data while keeping reasonable accountability in place. The remaining choices are incorrect because they are not appropriate policies for security purposes and do not adhere to the three principles.

Dan Is the Chief Information Officer for Humphrey Company, and He