CISSP practice question 16 of 35

Which of the following is critical if an empolyee is dismissed due to violation of an organization’s acceptable use policy (Aup) ?

Full set: 1,485 questions

Domain Identity and Access Management (IAM)

Answer options
A: Appropriate documentation Correct answer
B: privilege suspension
C: proxy records
D: Internet access logs
Correct Answer:
A. Appropriate documentation
Explanation

Appropriate documentation is the most critical element when dismissing an employee for an AUP violation. This documentation serves as the official, legally defensible record of the entire process. It includes the signed AUP, evidence of the violation (such as logs), records of warnings, the investigation report, and the final termination notice. This comprehensive record is essential to demonstrate due process, fairness, and consistency, thereby protecting the organization from potential legal challenges like wrongful termination claims. While other items are components of this process, documentation is the overarching requirement that validates the dismissal itself.

References

1. (ISC)². (2021). CISSP Certified Information Systems Security Professional Official Study Guide (9th ed.). Wiley. Chapter 2

"Personnel Security and Risk Management Concepts

" in the section on "Termination

" emphasizes the need to "document everything that happens during the termination process" to ensure it is handled correctly and legally.

2. National Institute of Standards and Technology (NIST). (2020). Special Publication 800-53 Revision 5: Security and Privacy Controls for Information Systems and Organizations. Control ID: PS-8 (Personnel Sanctions). The discussion for this control emphasizes that organizations must have a "formal

documented" process for applying sanctions

which underpins the necessity of documentation for actions like termination.

3. Stewart

J. M.

Chapple

M.

& Gibson

D. (2021). CISSP (ISC)2 Certified Information Systems Security Professional Official Study Guide (8th ed.). Sybex. Domain 7

"Security Operations

" discusses investigations and the importance of collecting and documenting evidence properly to support any subsequent administrative or legal action

including termination.

Scroll to Top