Which of the following is not a best practice to eliminate the possibility of insider attacks?

Question

Options

• ADisable the users from installing unauthorized software or accessing malicious websites using the
• BMonitor employee behaviors and the computer systems used by employees
• CImplement secure backup and disaster recovery processes for business continuity
• DAlways leave business details over voicemail or email broadcast message

• A
  3% (1)
• B
  3% (1)
• D
  95% (37)

Explanation

Leaving sensitive business details over voicemail or sending them out through email broadcast messages is not a best practice for security. This approach significantly increases the risk of information leakage and unauthorized access to critical business information. Such practices can be exploited by insiders to conduct malicious activities, including data theft, fraud, or sabotage. The best practices for mitigating insider threats involve implementing strict access controls, monitoring and auditing employee actions, securing communications, and ensuring that sensitive information is only shared through secure and authorized channels. Encouraging or allowing the practice of leaving sensitive business details in such insecure manners contradicts the principles of information security and increases the vulnerability to insider attacks.

No community discussion yet for this question.