CRISC: Certified in Risk and Information Systems ControlDemo

Question

Employees at an organization are using an unauthorized cloud-based service to share company calendars. They have been attaching files to calendar invitations. Which option would MOST effectively reduce the risk of data loss?

A Implement an information classification policy.
B Implement a technical solution that prevents syncing.
C Instruct employees not to use attachments in calendar entries.
D Update the security awareness program.

Explanation

Blocking synchronization with the unauthorized cloud service directly prevents calendar data and attached files from being transferred outside the organization. Administrative policies, employee instructions, and awareness training depend on user compliance and do not reliably stop the data transfer.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ549

Community Discussion