ITPEC IP April 2022 Question 44
ITPEC IP April 2022 — Question 44 of 100
It is inappropriate to impose security obligations only on employees while making no corresponding request of outsourced companies. Contractors and outsourced personnel may access the same information assets and create comparable human-resource risks. Their contractual terms and working arrangements must therefore include suitable information-security responsibilities and controls.
Answer (c)
Why not others:
- lawful background screening for candidates is an appropriate pre-employment control
- defined disciplinary procedures support enforcement of security rules
- continuing confidentiality and security obligations after employment ends protect information after departure
Key rule: Personnel security controls must cover employees and relevant external parties throughout recruitment, engagement, change, and termination.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.