CGEIT: Certified in the Governance of Enterprise IT

By Isaca · Question Mode

QuestionQ29

VerifiedGovernance of Enterprise IT

An enterprise seeks to address the human-factor risk of social engineering within the organization. From a governance standpoint, which of the following is the BEST way to mitigate this risk?

Explanation

Mandated annual security-awareness training is an organization-wide governance control that helps personnel recognize, avoid, and report social-engineering attacks. It directly addresses the human behavior that such attacks exploit.

Community Discussion

No comments yet. Be the first to start the discussion!