What is an issue that Stephanie needs to be concerned with?

Stephanie is a recently hired manager at a large financial organization. She has found out that three employees are suspected of moving sensitive customer data from their computer systems to email messages. Her security officer indicates that keystroke monitoring should be deployed to these users’ systems. What is an issue that Stephanie needs to be concerned with?

A.
Backdoors

B.
Trojan horses

C.
Information flow

D.
Privacy

Explanation:
Privacy issues are involved with this type of monitoring, and companies
could be subject to criminal and civil liabilities if it is done without proper
notification to the employees and authorization from management. If a company wants
to use this type of auditing, it should state so in the security policy, address the
issue in security-awareness training, and present a banner notice to the user
warning that the activities at that computer may be monitored in this fashion. These
steps should be taken to protect the company from violating an individual’s privacy,
and they should inform the users where their privacy boundaries start and stop
pertaining to computer use