CRISC · Question #441
During a review of the asset life cycle process, a risk practitioner identified several unreturned and unencrypted laptops belonging to former employees. Which of the following is the GREATEST…
The correct answer is C. Unauthorized access to organizational data. The greatest concern with unreturned and unencrypted laptops from former employees is the potential for unauthorized access to organizational data, leading to data breaches and significant harm.
Question
During a review of the asset life cycle process, a risk practitioner identified several unreturned and unencrypted laptops belonging to former employees. Which of the following is the GREATEST concern with this finding?
Options
- AInsufficient laptops for existing employees
- BAbuse of leavers' account privileges
- CUnauthorized access to organizational data
- DFinancial cost of replacing the laptops
How the community answered
(55 responses)- A4% (2)
- B11% (6)
- C80% (44)
- D5% (3)
Why each option
The greatest concern with unreturned and unencrypted laptops from former employees is the potential for unauthorized access to organizational data, leading to data breaches and significant harm.
While there might be a need for more laptops, this is an operational concern and not the greatest security risk compared to data exposure.
Abuse of leavers' account privileges is a separate concern related to identity and access management, distinct from the physical security of unreturned hardware.
Unreturned and unencrypted laptops present a critical risk because former employees or malicious actors could gain unauthorized access to any sensitive organizational data stored on them. Since the laptops are unencrypted, the data is easily accessible if the device falls into the wrong hands, leading to potential data breaches and significant reputational and financial damage.
The financial cost of replacing laptops is a monetary loss, which is less significant than the potential impact of a data breach from unauthorized access to sensitive information.
Concept tested: Asset disposition and data security
Source: https://learn.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-asset-management#am-3-securely-dispose-of-assets
Topics
Community Discussion
No community discussion yet for this question.