Complete CRISC Isaca Materials

 The best answer is D. Organizational policy. An organizational policy is a set of rules and guidelines that defines how the organization operates and conducts its activities. Anorganizational policy should direct how the employee monitoring system is used, because it can specify the purpose, scope, methods, and limitations of the monitoring, as well as the roles and responsibilities of the parties involved, the data protection and privacy measures, and the consequences of non-compliance. An organizational policy can also help to ensure that the employee monitoring system is aligned with the organization’s objectives, values, and culture, and that it complies with the relevant laws and regulations. The other options are not the best answer, although they may be related or influential to the organizational policy. Organizational strategy is a plan of action that outlines the organization’s vision, mission, goals, and initiatives, but it does not provide the details or the rules of how the employee monitoring system is used. Employee code of conduct is a document that describes the expected behavior and ethics of the employees, but it does not address the specific aspects or the procedures of the employee monitoring system. Industry best practices are the proven methods and standards that are adopted by the leading organizations in a specific field or sector, but they may not be applicable or suitable for every organization or situation. References = Workplace Monitoring Policy Template - CurrentWare, The All-In-One Guide to Employee Monitoring - G2

Technical control owners are responsible for the day-to-day operation and maintenance of controls. Their primary accountability is to ensure that controls are effectively implemented and continue to operate as intended to mitigate associated risks.

Unauthorized modification of data by a database administrator is a security risk that involves altering, deleting, or inserting data on a database without proper authorization or approval, by a person who has privileged access to the database, such as a database administrator12.

The best control to detect unauthorized modification of data by a database administrator is to review database activity logs, which are records that capture and store the details and history ofthe transactions or activities that are performed on the database, such as who, what, when, where, and how34.

Reviewing database activity logs is the best control because it provides evidence and visibility of the database operations, and enables the detection and reporting of any deviations, anomalies, or issues that may indicate unauthorized modification of data by a database administrator34.

Reviewing database activity logs is also the best control because it supports the accountability and auditability of the database operations, and facilitates the investigation and resolution of any unauthorized modification of data by a database administrator34.

The other options are not the best controls, but rather possible measures or techniques that may supplement or enhance the review of database activity logs. For example:

Reviewing database access rights is a measure that involves verifying and validating the permissions and privileges that are granted or revoked to the users or roles who can access or modify the data on the database56. However, this measure is not the best control because it does not directly detect unauthorized modification of data by a database administrator, especially if the database administrator has legitimate access rights to the data56.

Comparing data to input records is a technique that involves matching and reconciling the data on the database with the original or source data that are entered or imported into the database, and identifying and correcting any discrepancies or errors78. However, this technique is not the best control because it does not directly detect unauthorized modification of data by a database administrator, especially if the input records are also modified or compromised78.

Reviewing changes to edit checks is a technique that involves examining and evaluating the modifications or updates to the edit checks, which are rules or validations that are applied to the data on the database to ensure their accuracy, completeness, andconsistency9 . However, this technique is not the best control because it does not directly detect unauthorized modification of data by a database administrator, especially if the edit checks are bypassed or disabled9 . References =

1: Database Security: Attacks and Solutions | SpringerLink2

2: Unauthorised Modification of Data With Intent to Cause Impairment3

3: Database Activity Monitoring - Wikipedia4

4: Database Activity Monitoring (DAM) | Imperva5

5: Database Access Control - Wikipedia6

6: Database Access Control: Best Practices for Database Security7

7: Data Reconciliation - Wikipedia8

8: Data Reconciliation and Gross Error Detection9

9: Edit Check - Wikipedia

Edit Checks: A Data Quality Tool