During audit fieldwork, an IS auditor learns that employees are allowed to connect their personal devices to company-owned computers. How can the auditor BEST validate that appropriate security controls are in place to prevent data loss?
A.
Verify the data loss prevention (DLP) tool is properly configured by the organization.
B.
Review compliance with data loss and applicable mobile device user acceptance policies.
C.
Verify employees have received appropriate mobile device security awareness training.
D.
Conduct a walk-through to view results of an employee plugging in a device to transfer confidential data.
This is the most effective approach because a properly configured DLP tool can detect, prevent, and alert on unauthorized data transfers, including those involving personal devices. It directly addresses the risk of data loss by ensuring the system is actively monitoring and controlling sensitive information when employees connect personal devices to company-owned computers.
'Properly configured' is an ambiguous term. Review needs to be done against acceptable risks translated into policy documentation - Anwser B is correct.
The best answer is B. Review data loss and compliance with the applicable mobile device user acceptance policy.
reason:
Option A only focuses on the configuration of DLP tools without considering employee behavior and policy compliance.
Option C. While important, insufficient employee awareness training does not necessarily result in data being lost.
Option D, while testing employee responses to data loss, does not fully verify the effectiveness of all security controls.
B, This option addresses the overall framework and guidelines for managing risks associated with personal device usage, making it the best choice for validating security controls.
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Eiad1100
1 month agoPumeza
2 months agoLightfinger
2 months agovyvi130
2 months, 1 week agoBenHung
7 months, 2 weeks agoa84n
8 months, 2 weeks ago5b56aae
8 months, 3 weeks agoCISA2021
12 months agoChangwha
1 year, 6 months ago