CISSP practice question 16 of 35
Which of the following is critical if an empolyee is dismissed due to violation of an organization’s acceptable use policy (Aup) ?
Full set: 1,485 questionsDomain Identity and Access Management (IAM)
Appropriate documentation is the most critical element when dismissing an employee for an AUP violation. This documentation serves as the official, legally defensible record of the entire process. It includes the signed AUP, evidence of the violation (such as logs), records of warnings, the investigation report, and the final termination notice. This comprehensive record is essential to demonstrate due process, fairness, and consistency, thereby protecting the organization from potential legal challenges like wrongful termination claims. While other items are components of this process, documentation is the overarching requirement that validates the dismissal itself.
1. (ISC)². (2021). CISSP Certified Information Systems Security Professional Official Study Guide (9th ed.). Wiley. Chapter 2
"Personnel Security and Risk Management Concepts
" in the section on "Termination
" emphasizes the need to "document everything that happens during the termination process" to ensure it is handled correctly and legally.
2. National Institute of Standards and Technology (NIST). (2020). Special Publication 800-53 Revision 5: Security and Privacy Controls for Information Systems and Organizations. Control ID: PS-8 (Personnel Sanctions). The discussion for this control emphasizes that organizations must have a "formal
documented" process for applying sanctions
which underpins the necessity of documentation for actions like termination.
3. Stewart
J. M.
Chapple
M.
& Gibson
D. (2021). CISSP (ISC)2 Certified Information Systems Security Professional Official Study Guide (8th ed.). Sybex. Domain 7
"Security Operations
" discusses investigations and the importance of collecting and documenting evidence properly to support any subsequent administrative or legal action
including termination.
Keep practicing
Take the free CISSP practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CISSP practice questions
- Question 1Which of the following BEST describes a Protection Profile (PP)?
- Question 2What principle requires that changes to the plaintext affect many parts of the ciphertext?
- Question 7When planning a penetration test, the tester will be MOST interested in which information?
- Question 8Which one of the following operates at the session, transport, or network layer of the Op…
- Question 9Which of the following is the MOST beneficial to review when performing an IT audit?
- Question 10Which of the following is the MOST important activity an organization performs to ensure …
