nerdexam
Isaca

CRISC · Question #441

During a review of the asset life cycle process, a risk practitioner identified several unreturned and unencrypted laptops belonging to former employees. Which of the following is the GREATEST…

The correct answer is C. Unauthorized access to organizational data. The greatest concern with unreturned and unencrypted laptops from former employees is the potential for unauthorized access to organizational data, leading to data breaches and significant harm.

Submitted by carter_n· Apr 18, 2026IT Risk Assessment

Question

During a review of the asset life cycle process, a risk practitioner identified several unreturned and unencrypted laptops belonging to former employees. Which of the following is the GREATEST concern with this finding?

Options

  • AInsufficient laptops for existing employees
  • BAbuse of leavers' account privileges
  • CUnauthorized access to organizational data
  • DFinancial cost of replacing the laptops

How the community answered

(55 responses)
  • A
    4% (2)
  • B
    11% (6)
  • C
    80% (44)
  • D
    5% (3)

Why each option

The greatest concern with unreturned and unencrypted laptops from former employees is the potential for unauthorized access to organizational data, leading to data breaches and significant harm.

AInsufficient laptops for existing employees

While there might be a need for more laptops, this is an operational concern and not the greatest security risk compared to data exposure.

BAbuse of leavers' account privileges

Abuse of leavers' account privileges is a separate concern related to identity and access management, distinct from the physical security of unreturned hardware.

CUnauthorized access to organizational dataCorrect

Unreturned and unencrypted laptops present a critical risk because former employees or malicious actors could gain unauthorized access to any sensitive organizational data stored on them. Since the laptops are unencrypted, the data is easily accessible if the device falls into the wrong hands, leading to potential data breaches and significant reputational and financial damage.

DFinancial cost of replacing the laptops

The financial cost of replacing laptops is a monetary loss, which is less significant than the potential impact of a data breach from unauthorized access to sensitive information.

Concept tested: Asset disposition and data security

Source: https://learn.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-asset-management#am-3-securely-dispose-of-assets

Topics

#Asset management#Data security#Risk identification#Offboarding process

Community Discussion

No community discussion yet for this question.

Full CRISC Practice