Which of the following would an IS auditor recommend as the MOST effective preventive control to reduce the risk of data leakage?
Which of the following would an IS auditor recommend as the MOST effective preventive control to reduce the risk of data leakage?
To reduce the risk of data leakage, ensuring that paper documents are disposed of securely is the most effective preventive control among the options provided. Secure disposal directly prevents unauthorized access to sensitive information, thereby mitigating the risk of data leakage. Implementing digital watermarks, while useful for tracing the source of leaks, is more of a detective control than a preventive one. An intrusion detection system and verifying application logs are also more suited to detecting incidents rather than preventing them.
C is the only preventive control in other options
Answer A is correct
A is correct.
Selected Answer is A Digital watermarks are a form of data protection that embeds information directly into digital content, such as files, images, or documents. They are often invisible or difficult to remove, making it harder for unauthorized individuals to manipulate or leak the data without detection. This control helps in tracking and identifying the source of potential leaks, as the watermarks can indicate the origin of the data.
An IS auditor would recommend ensuring that paper documents are disposed of securely as the most effective preventive control to reduce the risk of data leakage. Option A, validating that all data files contain digital watermarks, is a detective control that helps identify the source of data leaks after they occur, but it does not prevent them.
Why A? Digital watermarking can provide an additional layer of security for content protection by deterring illegal use and duplication. Because they are digital, these types of watermarks can be read and deciphered by computers, making it easier to validate original content and possibly trigger actions to forestall illegal dissemination. Ultimately, this copyright protection prevents brand erosion. In addition to protecting intellectual property and copyrighted material, digital watermarks can also help organizations prevent the unauthorized transfer, copying, or retrieval of company documents. This is especially crucial when malware or a malicious actor is seeking to remove high-value documents from an organization.
Answer: A appears to be the MOST relevant preventive control among the options provided. Digital watermarks can be embedded within data files to uniquely identify them, making it easier to trace and attribute leaked data back to its source, thus acting as a deterrent against unauthorized sharing or leakage.
A validates ownership. Nothing else. Cant prevent leakage. Why every other question, the response is wrong?? Is this done in purpose??
how is A a preventative measure? it can help identify the source of leaked data but it doesn't prevent. It's either B or C and I am skewing more towards B.
nvm i think its closer to C
C is the correct answer