Exam CISM topic 1 question 46 discussion

D. Screening prospective employees is the MOST effective method of preventing deliberate internal security breaches. This is because a thorough screening process can help to identify potential security risks before they are hired, such as a history of malicious or unethical behavior. Additionally, by conducting background checks, verifying credentials, and checking references, an organization can gain a better understanding of a candidate's qualifications and trustworthiness, which can help to reduce the risk of an internal security breach. Other methods such as firewalls, intrusion detection systems, and biometric security access control help to secure the perimeter and monitor for unauthorized access, but can't prevent a malicious insider who already has access to the systems.

Screening prospective employees thoroughly before hiring is a crucial step in preventing deliberate internal security breaches. Background checks, reference checks, and a comprehensive vetting process help organizations identify potential employees with a history of dishonesty, criminal behavior, or other factors that could pose a risk to security. While options like a well-designed intrusion detection system (IDS), biometric security access control, and a well-designed firewall system are important components of an overall security strategy, they are primarily focused on detecting and preventing unauthorized access or external threats. Screening prospective employees addresses the human element and helps ensure that individuals with malicious intentions are less likely to be granted access to sensitive information and systems within the organization.

Screening is one time activity. It will sotp disgruntled employee to harm the network. Therefore strong IDS is best option to detect.

Answer is D. Employee screening is very important along with other technical elements that helps preventing internal threat.

D. answer doesn't make sense. You can screen employees to know their past behavior but can't predict future behaviors. That's why we need a layered security control to prevent rogue employee or error. C option is better

C. Well-designed firewall system