Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
n practice the strongest defense combines all four layers, but the continuous, preventive restriction provided by RBAC is the most effective single control against an active malicious insider.
D. Role-based access control: This is the most effective proactive control because it restricts an insider's ability to access or compromise confidential information in the first place, based on their job role and the principle of least privilege. According to IBM, RBAC helps defend against malicious insiders by limiting access to sensitive data and systems, making it harder for employees to maliciously or negligently misuse their access privileges to harm the organization.
RBAC limits access to information based on the roles of individual users within an organization, ensuring that employees only have access to the data necessary for their job functions12. This minimizes the risk of unauthorized access and potential misuse of sensitive information by insiders2. While the other options are also important components of a comprehensive security strategy, RBAC is particularly effective in preventing malicious insiders from accessing confidential information they do not need for their roles1.