Which of the following is the MOST effective way to prevent employees from inappropriately accessing customer information?

Question

Options

• AEnforce an acceptable use policy.
• BRequire organization-wide data privacy training.
• CImplement role-based user provisioning.
• DEngage in employee monitoring.

• A
  8% (3)
• B
  3% (1)
• C
  76% (28)
• D
  14% (5)

Explanation

Role-based access control (RBAC) is a technical preventive control that limits each employee's system access to only the data required for their specific job function. This enforces the principle of least privilege by design, making it structurally impossible for employees to access customer data outside their authorized scope. An acceptable use policy (A) sets behavioral rules but relies on compliance and does not technically restrict access. Data privacy training (B) raises awareness but does not prevent unauthorized access at the system level. Employee monitoring (D) detects inappropriate access after it occurs but does not prevent it - making it a detective, not preventive, control.

No community discussion yet for this question.