nerdexam
(ISC)2

CGRC · Question #340

Which of the following groups represents the most likely source of an asset loss through the inappropriate use of computers? Response:

The correct answer is D. Employees. Employees represent the most likely source of asset loss through the inappropriate use of computers due to their privileged access and potential for both unintentional errors and malicious actions.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following groups represents the most likely source of an asset loss through the inappropriate use of computers? Response:

Options

  • AHackers
  • BVisitors
  • CCustomers
  • DEmployees

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    6% (2)
  • D
    88% (30)

Why each option

Employees represent the most likely source of asset loss through the inappropriate use of computers due to their privileged access and potential for both unintentional errors and malicious actions.

AHackers

Hackers are external adversaries who seek unauthorized access, but employee actions, whether accidental or intentional, often account for a larger percentage of direct asset loss from within.

BVisitors

Visitors typically have limited or no access to internal IT assets, making them a less likely direct source of asset loss through computer misuse compared to employees.

CCustomers

Customers interact with specific services and typically do not have the broad internal system access that would enable them to cause widespread asset loss through inappropriate computer use.

DEmployeesCorrect

Employees are often cited as the most significant source of asset loss through inappropriate computer use, primarily because they have legitimate access to internal systems and data, which can lead to unintentional errors, negligence, or malicious insider threats like data theft or sabotage.

Concept tested: Insider threat (employees)

Topics

#Insider Threat#Risk Management#Asset Loss#Human Factors

Community Discussion

No community discussion yet for this question.

Full CGRC Practice