CISM: Certified Information Security ManagerDemo

Question

An information security manager finds that newly hired privileged users are failing to take the required steps to safeguard critical information on their workstations.

Which of the following is the BEST way to address this situation?

A Publish an acceptable use policy and require signed acknowledgment.
B Turn on logging and record user activity.
C Communicate the responsibility and provide appropriate training.
D Implement a data loss prevention (DLP) solution.

Explanation

Privileged users need clear accountability for protecting critical information and training appropriate to their responsibilities. Communicating those responsibilities and providing suitable training directly improves the knowledge and behavior needed to protect information at their workstations.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ1214

Community Discussion