A security manager is developing new policies and procedures. Which of the following is a best practice in end user security?

Question

Options

• AEmployee identity badges and physical access controls to ensure only staff are allowed onsite.
• BA training program that is consistent, ongoing, and relevant.
• CAccess controls to prevent end users from gaining access to confidential data.
• DAccess controls for computer systems and networks with two-factor authentication.

• A
  4% (1)
• B
  91% (21)
• C
  4% (1)

Explanation

End user security best practices focus on the human element - users are consistently the weakest link in security. A training program that is consistent (regularly reinforced), ongoing (not a one-time event), and relevant (addresses current threats and company-specific policies) is the foundational best practice for end user security. Options A, C, and D describe technical and physical controls (access control, physical security, multi-factor authentication) that are important security measures but are not specifically categorized as 'end user security' best practices - they operate independently of user behavior. Training empowers users to be part of the security solution rather than a liability.

No community discussion yet for this question.