MENU
An organization has an acceptable use policy in place, but users do not formally acknowledge the policy. Which of the following is the MOST significant risk from this finding?
Suggested Answer: D
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Without formal acknowledgement of the acceptable use policy, users may not be aware of the policies and procedures that are in place and may not understand the consequences of their actions. This could lead to violations of the policy and the associated risks, such as data breaches, security violations, and financial losses.
11 comments · newest first
AR
Arthur
11 months ago
Compliance data is crucial, but accountability is key here.
QU
Quiana
11 months ago
Surprised they don't have users formally acknowledge it!
SH
Sharen
11 months ago
Violation of industry standards could be a big deal.
WE
Weldon
11 months ago
I'm not so sure, noncompliance with documentation seems huge too.
CH
Cherry
12 months ago
Definitely a lack of user accountability.
RO
Rolland
12 months ago
I recall that documentation is crucial, but I wonder if the lack of accountability (D) is the bigger risk in this scenario.
KA
Katlyn
12 months ago
I practiced a similar question where the focus was on compliance metrics. I think A makes sense here, but I’m leaning towards D as well.
WI
Wilda
1 year ago
I'm not entirely sure, but I feel like B could be significant since not acknowledging policies might lead to violations of industry standards.
VA
Valene
1 year ago
I remember discussing how lack of user acknowledgment can lead to accountability issues, so I think D might be the right choice.
BE
Beckie
1 year ago
Hmm, I think the answer is C. The question is asking for the services allowed through the firewall, and the `firewall-cmd --list-services` command should return that information.
WH
Whitley
1 year ago
This seems like a straightforward question about the importance of testing in the Scrum process. I'll focus on understanding the key points in the definition of "Potentially Shippable" and how testing fits into that.