QUESTION: 41

During audit fieldwork, an IS auditor learns that employees are allowed to connect their personal devices to company-owned computers. How can the auditor
BEST validate that appropriate security controls are in place to prevent data loss?

Verify the data loss prevention (DLP) tool is properly configured by the organization.
Review compliance with data loss and applicable mobile device user acceptance policies.
Verify employees have received appropriate mobile device security awareness training.
Conduct a walk-through to view results of an employee plugging in a device to transfer confidential data.

Answer(s): B

Reveal Solution Next Question

QUESTION: 42

Management has requested a post-implementation review of a newly implemented purchasing package to determine to what extent business requirements are being met. Which of the following is MOST likely to be assessed?