CRISC Question 298

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  The risk described is fraudulent use of the enterprise's brand on Internet sites (for example, fake websites, phishing sites, counterfeit stores, or unauthorized use of logos and trademarks). The best way to mitigate this risk is to actively scan and monitor the Internet for unauthorized use of the organization's brand. This enables the organization to: Detect fraudulent websites and brand misuse quickly. Initiate takedown procedures. Warn customers and stakeholders. Reduce the impact of phishing and brand impersonation attacks.

• Chose B2

  B. Scanning the Internet to search for unauthorized usage. The best way to mitigate the risk associated with fraudulent use of an enterprise's brand on Internet sites is to scan the Internet to search for unauthorized usage. This approach involves actively monitoring online platforms and websites to identify instances where the enterprise's brand is being used fraudulently or without authorization. By identifying such instances early, the organization can take appropriate actions to address the unauthorized usage and protect its brand reputation. While the other options (utilizing data loss prevention technology, monitoring the enterprise's use of the Internet, developing training and awareness campaigns) might be relevant for other aspects of risk management, scanning the Internet specifically addresses the risk of fraudulent brand use by proactively identifying and addressing instances as they arise.

• Chose D1

  This one is difficult as you have two different perspectives - external to the company and internal to the company. The training and awareness does not specifically call out either, nor does the question. Agree scanning takes care of a symptom or the actual fraud, but training and awareness help reduce the vulnerability.