Which of the following should the auditor recommend be performed FIRST?

An IS auditor notes that several employees are spending an excessive amount of time using social media sites for personal reasons.

Which of the following should the auditor recommend be performed FIRST?
A . Implement a process to actively monitor postings on social networking sites.
B . Adjust budget for network usage to include social media usage.
C . Use data loss prevention (DLP) tools on endpoints.
D . implement policies addressing acceptable usage of social media during working hours.

View Answer

Answer: D

Explanation:

The first course of action that the auditor should recommend after finding that several employees are spending an excessive amount of time using social media sites for personal reasons is to implement policies addressing acceptable usage of social media during working hours. Policies can help define the scope, purpose, rules, and expectations of using social media in the workplace, both for personal and professional reasons. Policies can also specify the consequences of violating the policies, such as disciplinary actions or termination. Policies can help deter employees from misusing social media at work, which could affect their productivity, performance, or security. Policies can also help protect the organization from legal liabilities or reputational damages that could arise from inappropriate or unlawful employee behavior on social media.