Isaca
CISM · Question #983
A security review of an HR application reveals a file server containing confidential HR data is accessible to external user IDs. Which of the following should the information security manager do FIRST
Sign in or unlock CISM to reveal the answer and full explanation for question #983. The question stem and answer options stay visible for context.
Submitted by jian89· Apr 18, 2026Information Security Incident Management
Question
A security review of an HR application reveals a file server containing confidential HR data is accessible to external user IDs. Which of the following should the information security manager do FIRST?
Options
- AUpdate the existing data privacy policy.
- BConfirm the issue with the data owner.
- CTrain the HR team on proper access control.
- DRemove access permissions for the external users.
Unlock CISM to see the answer
You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Access Control#Incident Response#Risk Mitigation#Data Protection