CISM Certified Information Security Manager – Question0525

An organization’s senior management is encouraging employees to use social media for promotional purposes. Which of the following should be the information security manager’s FIRST step to support this strategy?

A.
Incorporate social media into the security awareness program.
B. Develop a guideline on the acceptable use of social media.
C. Develop a business case for a data loss prevention (DLP) solution.
D. Employ the use of a web content filtering solution.

Correct Answer: B