CAS-002 · Question #139
A Chief Information Security Officer (CISO) of a major consulting firm has significantly increased the company's security posture; however, the company is still plagued by data breaches of misplaced…
The correct answer is B. Implement full disk encryption on all storage devices the firm owns. Data breaches from misplaced assets are best mitigated by encrypting all storage devices the firm owns, not just laptops. Full disk encryption ensures that even if a device is lost or stolen, the data remains unreadable.
Question
A Chief Information Security Officer (CISO) of a major consulting firm has significantly increased the company's security posture; however, the company is still plagued by data breaches of misplaced assets. These data breaches as a result have led to the compromise of sensitive corporate and client data on at least 25 occasions. Each employee in the company is provided a laptop to perform company business. Which of the following actions can the CISO take to mitigate the breaches?
Options
- AReload all user laptops with full disk encryption software immediately.
- BImplement full disk encryption on all storage devices the firm owns.
- CImplement new continuous monitoring procedures.
- DImplement an open source system which allows data to be encrypted while processed.
How the community answered
(44 responses)- A7% (3)
- B75% (33)
- C16% (7)
- D2% (1)
Why each option
Data breaches from misplaced assets are best mitigated by encrypting all storage devices the firm owns, not just laptops. Full disk encryption ensures that even if a device is lost or stolen, the data remains unreadable.
Reloading only user laptops with FDE excludes other storage media such as external drives and USB sticks, which are also prone to being misplaced.
Full disk encryption on all storage devices covers every asset the firm owns - laptops, external drives, USB drives, and any other portable media. If a device is misplaced or stolen, FDE renders the data unreadable without the decryption key, directly addressing the root cause of the breaches.
Continuous monitoring improves detection of breaches after they occur but does not prevent data exposure from physically misplaced or stolen assets.
Encrypting data while it is being processed (homomorphic encryption or similar) addresses in-memory confidentiality, not the physical loss of storage devices.
Concept tested: Full disk encryption for physical asset loss prevention
Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/bitlocker-overview
Topics
Community Discussion
No community discussion yet for this question.