Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I think the answer is Awareness Training. By virtue of the employee having access to the data already, means their access was most likely legitimate. Issue is they "accidentally" used it in ways that are not allowed by the organizational policy. "Accidentally" points to an awareness issue.
User access controls regulate who can open/read/write a file. In this case, the employee already had legitimate access. The problem was how they handled the file afterward, not an access issue. The employee should have been trained clearly: “You cannot remove files from the premises. Here’s why it’s a security risk.”
it does not say unauthorised access, the file was taken home this is user training.