CISA Certified Information Systems Auditor – Question0413

An organization plans to launch a social media presence as part of a new customer service campaign. Which of the following is the MOST significant risk from the perspective of potential litigation?

A.
The policy stating what employees can post on the organization’s behalf is unclear.
B. Access to corporate-sponsored social media accounts requires only single-factor authentication.
C. Approved employees can use personal devices to post on the company’s behalf.
D. There is a lack of clear procedures for responding to customers on social media outlets.

Correct Answer: A