Which measure assures that valuable information is not left out available for the taking?

The correct answer is A. Clear desk policy. A clear desk policy ensures that sensitive documents, notes, and storage media are locked away or disposed of when not in use, preventing unauthorized individuals from simply picking up valuable information left in plain sight - this is the direct control that addresses the…

Risk Management

Question

Options

AClear desk policy
BInfra-red detection
CAccess passes

How the community answered

(28 responses)

A
71% (20)
B
18% (5)
C
11% (3)

Explanation

A clear desk policy ensures that sensitive documents, notes, and storage media are locked away or disposed of when not in use, preventing unauthorized individuals from simply picking up valuable information left in plain sight - this is the direct control that addresses the risk of information being "left out available for the taking."

B (Infrared detection) is a physical intrusion detection mechanism - it detects movement in restricted areas but does nothing to prevent someone from reading or taking documents already visible on a desk. C (Access passes) control who can enter a space, but once an authorized person is inside, loose documents remain exposed.

Memory tip: Think of the phrase literally - a "clear desk" means nothing is left out. If a desk is clear, there's nothing available for the taking.

Topics

#clear desk policy#information security#data protection#physical security

Community Discussion

No community discussion yet for this question.

Full ISFS Practice