CRISC Question 256

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  B. using biometric door locks The compensating control that MOST effectively addresses the risk associated with piggybacking into a restricted area without a dead-man door is "B. using biometric door locks." Biometric door locks, such as fingerprint or retina scanners, provide a higher level of security compared to traditional access methods like ID badges. Biometric authentication ensures that only authorized individuals with matching biometric data can gain access, reducing the risk of unauthorized piggybacking.

• Chose D3

  D. security awareness training Piggybacking, or tailgating, involves an unauthorized person following an authorized person into a restricted area. This risk often arises from employees' lack of awareness about the security implications of holding a door open for others. Security awareness training can teach employees about the risks associated with piggybacking and instruct them not to allow others to enter restricted areas without proper authentication. While options A, B, and C might enhance security to a certain extent, they may not effectively address piggybacking because even with advanced technology, a person can still follow an authenticated person through the door. Therefore, security awareness training is the most effective compensating control in this case.

• Chose D2

  Agree 'without a dead-man door'. If there is no physical control that responds effectively to the threat, the best thing to do is warn it so that an employee is attentive and prevents it from 'sneaking in'.