フリー問題

問題文

An organization wants Insider Risk Management to be effective but is concerned about employee privacy. Which approach reflects the appropriate balance?

選択肢

1. Monitor all employees at maximum sensitivity, because covering everyone at the highest setting is the only way to be certain that a genuine risk indicator is never missed.
2. Let every manager review all alerts for their own team members.
3. Scope policies to the risks that matter, use pseudonymization where available, and define who may review what before the solution goes live.
4. Do not deploy the solution at all because any monitoring is inappropriate.