A project manager discovers that a team member has been using a free online tool to convert sensitive client data, violating the company's data security policy. The team member was unaware of the policy. What should the project manager do FIRST?

Answer options:

Fire the team member immediately for the security breach.

Instruct the team member to stop using the tool and assess the extent of the data exposure.

Update the risk register and schedule training for the team next week.

Report the breach to the client immediately.

How to approach this question

Compliance breaches require immediate 'Stop and Assess' logic.

B.Instruct the team member to stop using the tool and assess the extent of the data exposure.✓ Correct

When compliance is violated, the first step is to stop the non-compliant activity and assess the damage. Reporting and training follow.

Jumping to punishment (A) or external reporting (D) before understanding the scope of the issue.

114 questions · hints · full answers · grading