CAS-001 · Question #31
An employee was terminated and promptly escorted to their exit interview, after which the employee left the building. It was later discovered that this employee had started a consulting business…
The correct answer is B. Human Resources E. IT Management. Two business areas must be involved. Human Resources (B) is responsible for offboarding procedures and policies governing employee conduct, data handling agreements, and exit processes. The incident reveals a gap in HR policy - the employee was escorted out but removable media…
Question
An employee was terminated and promptly escorted to their exit interview, after which the employee left the building. It was later discovered that this employee had started a consulting business using screen shots of their work at the company which included live customer data. This information had been removed through the use of a USB device. After this incident, it was determined a process review must be conducted to ensure this issue does not recur. Which of the following business areas should primarily be involved in this discussion? (Select TWO).
Options
- ADatabase Administrator
- BHuman Resources
- CFinance
- DNetwork Administrator
- EIT Management
How the community answered
(46 responses)- A2% (1)
- B83% (38)
- C11% (5)
- D4% (2)
Explanation
Two business areas must be involved. Human Resources (B) is responsible for offboarding procedures and policies governing employee conduct, data handling agreements, and exit processes. The incident reveals a gap in HR policy - the employee was escorted out but removable media access was not blocked beforehand, and acceptable-use obligations were not enforced. IT Management (E) is responsible for enforcing technical controls such as disabling USB ports, implementing Data Loss Prevention (DLP), and revoking access to sensitive data immediately upon termination notification. Together, HR sets the policy and IT Management enforces it technically. A Database Administrator (A) and Network Administrator (D) are operational roles that implement specific technical tasks but do not set policy. Finance (C) has no direct role in this data exfiltration incident.
Topics
Community Discussion
No community discussion yet for this question.