Câu 133: CISA: Certified Information Systems Auditor

Management is concerned about sensitive information being intentionally or unintentionally emailed as attachments outside the organization by employees. What is the MOST important task before implementing any associated email controls?

1. A. Provide notification to employees about possible email monitoring.
2. B. Develop an information classification scheme. — đáp án hiện tại
3. C. Develop an acceptable use policy for end-user computing (EUC).
4. D. Require all employees to sign nondisclosure agreements (NDAs).