712-50 practice question 21 of 35

Scenario: Your program is developed around minimizing risk to information by focusing on people, technology, and operations. You have decided to deal with risk to information from people first. How can you minimize risk to your most sensitive information before granting access?

Full set: 493 questions
Answer options
A: Conduct background checks on individuals before hiring them Correct answer
B: Develop an Information Security Awareness program
C: Monitor employee browsing and surfing habits
D: Set your firewall permissions aggressively and monitor logs regularly.
Correct Answer:
A. Conduct background checks on individuals before hiring them
Explanation

 Managing Insider Risk Background checks help identify potential risks posed by individuals before granting access to sensitive information. This proactive measure reduces the likelihood of insider threats.  Other Risk Management Techniques While awareness programs, monitoring browsing habits, and firewall configurations are important, they address risks after an individual has been granted access, not before.  EC-Council Reference EC-Council highlights pre-employment screenings as a critical step in minimizing risk related to human factors.

Scroll to Top