QuestionQ24

Defensive Infrastructure and Tactics

Which of the following statements is the MOST accurate regarding insider-threat controls?

  • A Classification of information assets helps identify data to protect.
  • B Security awareness programs have a minimal impact on reducing the insider threat.
  • C Both detective and preventative controls prevent insider attacks.
  • D Rotation of duties makes an insider threat more likely.
  • E Separation of duties encourages one employee to control a great deal of information.
Explanation

Classifying information assets identifies which data is sensitive or valuable and therefore requires protection and appropriate security controls.

Community Discussion

No comments yet. Be the first to start the discussion!