CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ53

VerifiedTechnology and Security

An organization has recently implemented a cybersecurity awareness program that includes anti-phishing exercises for every employee. What type of control is being used?

Explanation

Cybersecurity awareness and anti-phishing exercises are deterrent controls because they educate users about phishing risks and discourage unsafe actions that could lead to compromise.

Community Discussion

No comments yet. Be the first to start the discussion!