A county animal-shelter website hosts a public lost-pet assistant. Anyone can type a question and anyone can upload a photo. A trustee calls it “just a chat box.” What should the leader require?
Select an answer to reveal the explanation.
Short Explanation
A public lost-pet assistant is still an application, even when it looks like a chat box. Require controls for public exposure, abuse, and untrusted uploads. Kind replies and a hope that a chat box is harmless are not a security review.
Full Explanation
A public assistant is still an application, even when it looks like a chat box. Public exposure, abuse, and untrusted uploads are leader requirements, not optional extras. The board should ask what controls sit in front of the assistant before it goes live. Configuring packets is not the leader’s job; requiring that the front end is treated as an application is.