What does misappropriation involve?

• A. Accessing data through legitimate means
• B. Assuming unauthorized control of a resource
• C. Maintaining user access to systems
• D. Documenting security policies

Answer: (B)

Misappropriation refers to the unauthorized use or control of someone else’s resources, property, or information for personal gain or in a manner that goes against the owner's interests. This definition aligns precisely with the choice about assuming unauthorized control of a resource. Misappropriation often involves taking or using data or assets that do not belong to the individual without permission, which can lead to legal and ethical implications.

The other choices do not fit the definition of misappropriation. Accessing data through legitimate means indicates proper authorization and use, which does not constitute misappropriation. Maintaining user access to systems suggests authorized use consistent with established access controls and does not involve unauthorized control. Documenting security policies pertains to the creation and management of procedures and guidelines for protecting data, which is more about organizational practices rather than the act of misappropriating resources. Therefore, the distinction of unauthorized control makes the chosen answer valid and representative of the concept of misappropriation.