CISM: Certified Information Security ManagerDemo

Question

An employee clicked a malicious link in an email, resulting in the compromise of company data. What is the BEST way to mitigate this risk in the future?

A Assess and update spam filtering rules.
B Establish an acceptable use policy.
C Implement disciplinary procedures.
D Conduct phishing awareness training.

Explanation

Phishing awareness training equips employees to identify suspicious emails and malicious links and to report or avoid them, directly reducing the likelihood of a successful phishing-based data compromise.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ579

Community Discussion