A university is reviewing controls for accidental file deletion, unauthorized access to an HR database, and corrupted system logs. Recommend controls from the material and explain which risks they address.
Answer
For accidental deletion, use backups, version control, automated tools, role-based permissions, and peer reviews to reduce deletion risk and support recovery. For unauthorized HR database access, use strong authentication, encryption, and monitoring to reduce unauthorized access and detect suspicious activity. For corrupted logs, use rigorous testing, backups, cryptographic checks, and centralized logging to reduce corruption risk and support reliable monitoring and investigation. The controls should be matched to the distinct operational and data risks.
Explanation
### Why this is right
The answer links each incident to controls named for that risk in the material. Deletion calls for prevention and recovery, unauthorized database access calls for access protection and monitoring, and log corruption calls for testing, recovery, and integrity checking.
### The concept
A control is useful when its function matches the failure or threat. Backups and version control can support restoration of deleted files; role-based permissions can limit who may delete or change them. Strong authentication helps verify who is accessing an HR database, while encryption and monitoring help protect sensitive records and identify suspicious access. Testing, backups, cryptographic checks, and centralized logging address log reliability and the ability to investigate events.
### What a good answer covers
- Match deletion with backups, version control, and permissions.
- Match unauthorized database access with authentication, encryption, and monitoring.
- Match log corruption with testing, backups, cryptographic checks, and centralized logging.
- Explain the purpose of the controls rather than listing them without connection.
### Terms
- **HR**: Human Resources. The organizational function responsible for employee matters and associated records.
- **Role-based permissions**: access rights assigned according to a person's job role.
- **Cryptographic check**: a cryptographic method that can help identify whether data has changed.
### Remember
State the risk first, then select controls that prevent, detect, contain, or recover from it.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free