CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ403

Technology and Security

Sensitive data was lost after an employee unintentionally removed a file from the premises, violating organizational policy. Which control MOST likely failed?

  • A Background checks
  • B Awareness training
  • C User access
  • D Policy management
Explanation

Awareness training ensures employees understand and follow organizational policies for handling sensitive information. An inadvertent removal of a sensitive file in violation of policy most directly indicates an awareness-training failure.

Community Discussion

No comments yet. Be the first to start the discussion!