Which of the Following Is NOT a Question to Be

question 2

Multiple Choice

Which of the following is NOT a question to be used as a self-assessment for recommended security practices in the category of people?

• A) Do you perform background checks on all employees with access to sensitive data,
• Areas, or access points?
• B) Are the user accounts of former employees immediately removed on termination?
• C) Would the typical employee recognize a security issue?
• D) Would the typical employee know how to report a security issue to the right people?

---

Definitions:

Staff Units

Specialized groups within an organization that provide support and expertise but do not directly contribute to its main objectives.

Specialized Expertise

Specific knowledge or skills in a particular area or field that sets an individual or group apart.

Appropriate Way

The most suitable or proper method to achieve a specific goal or to handle a situation.

Output Controls

Mechanisms put in place to measure the results of operations or performance to ensure that goals and objectives are met.