CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ58

VerifiedSecurity and Risk Management

The Chief Information Security Officer (CISO) at a large financial institution is responsible for implementing security controls that protect the confidentiality and integrity of the organization’s Information Systems. Which of the controls listed below should be prioritized FIRST?

Explanation

Encryption of data in transit and at rest is the broadest listed control for protecting sensitive information from unauthorized disclosure across both storage and communications. Cryptographic protections can also prevent unauthorized modification when implemented with integrity-protecting mechanisms, making this the strongest foundational choice for the stated confidentiality-and-integrity objective.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!