Exam CSSLP topic 2 question 14 discussion

Answer: ACD. While both printer access and data downloading from the internet can potentially represent a security threat, auditing printer access is typically considered more important because it relates directly to physical document security. If an unauthorized user gained access to a printer or printed confidential information that they were not authorized to view, this could cause serious problems such as loss of intellectual property, theft of sensitive data, or even legal liability if sensitive client information was involved. By auditing printer usage logs and determining who accessed which printers and when, organizations can help ensure the physical security of documents and prevent unauthorized access or misuse. In contrast, while downloading data from the internet represents its own potential risks (such as downloading malware), it may not always be necessary to audit this activity for every organization. The need for auditing internet downloads would largely depend on each individual organization's specific needs and risk profile - some companies may have more stringent policies around limiting employee web browsing than others depending on their industry or compliance requirements.