Which of the following MOST effectively reduces the risk of emails containing personally identifiable information (PII) being sent to unauthorized recipients?

The correct answer is D. Regular security awareness training. The greatest risk is unintentional human error, such as misaddressing an email. Security awareness training equips users to recognize PII and verify recipients. MFA protects account access but not outbound emails. IDS detects network threats, not email content. Audit trails only

Submitted by marco_it· Apr 18, 2026Protection of Information Assets

Question

Options

AMulti-factor authentication (MFA)
BIntrusion detection system (IDS)
CEmail audit trails
DRegular security awareness training

How the community answered

(33 responses)

A
3% (1)
B
3% (1)
C
9% (3)
D
85% (28)

Explanation

The greatest risk is unintentional human error, such as misaddressing an email. Security awareness training equips users to recognize PII and verify recipients. MFA protects account access but not outbound emails. IDS detects network threats, not email content. Audit trails only provide after-the-fact evidence.

Topics

#Security Awareness Training#PII Protection#Human Error#Risk Mitigation

Community Discussion

No community discussion yet for this question.

Full CISA Practice