Question 23

The Acceptable Use Policy (AUP) should be updated to reflect the new requirement.

Updating the Acceptable Use Policy (AUP) is necessary to clearly define the acceptable and unacceptable activities regarding the use of company resources, which now includes prohibiting cryptocurrency mining. This ensures all employees understand the guidelines and the implications of violating them.

A) MDM

Mobile Device Management (MDM) refers to the administration of mobile devices in an organization. While MDM policies may help manage devices, they do not specifically outline acceptable use of resources in terms of activities like cryptocurrency mining, making this option incorrect for addressing the violation at hand.

B) EULA

The End User License Agreement (EULA) typically pertains to the terms under which software can be used. Although it governs software use, it does not explicitly cover company-wide policies on resource usage, rendering it an inappropriate choice for updating guidelines about cryptocurrency mining activities.

C) IRP

The Incident Response Plan (IRP) outlines procedures for responding to security incidents. While it is crucial for handling violations once they occur, updating the IRP does not proactively communicate the company's stance on cryptocurrency mining, making this option less relevant for immediate policy changes.

D) AUP

The Acceptable Use Policy (AUP) directly addresses the appropriate use of company resources and sets clear guidelines for employee conduct. Updating the AUP to prohibit cryptocurrency mining ensures that all employees are informed of the new requirements and the consequences of any violations.

Conclusion

Updating the Acceptable Use Policy (AUP) is essential to establish clear guidelines regarding the use of company resources, particularly in light of the new prohibition on cryptocurrency mining. In contrast, the other options fail to address the specific need for clarity in acceptable behaviors, thus making them unsuitable for this scenario.