CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1225

Risk Response and Reporting

Which of the following is the BEST way to reduce the likelihood that an individual performs a potentially harmful action because of unnecessary entitlement?

  • A Least privilege
  • B Application monitoring
  • C Separation of duty
  • D Nonrepudiation
Explanation

The principle of least privilege grants each individual only the access and permissions necessary to perform authorized duties. Removing unnecessary permissions directly limits the harmful actions that person can perform.

Community Discussion

No comments yet. Be the first to start the discussion!