Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
if the question ask for the risk practitioner responsibity here, i would think for D. because risk practitioner cannot implement any control. As a risk practitioner, their primary responsibility is to identify and communicate risks. Raising awareness about the encryption requirements helps address the underlying issue by educating users on the importance of securing sensitive data, which can lead to better decision-making and adherence to policies.
Answer is B. for C,Employees might still send sensitive data unencrypted despite knowing the requirements, so additional technical controls would be necessary.
Implementing a control that blocks unencrypted outgoing emails containing sensitive data is a proactive measure to prevent the data loss from occurring in the first place. This control enforces the use of encryption for sensitive data and reduces the risk of unauthorized access to sensitive information in transit.