Legit CISA Exam Download

Here's the breakdown, considering

the need for DLP visibility in the cloud:

Verified Answer

C. Employ a cloud access security broker (CASB).

Very Short Explanation

CASBs are specifically designed to enhance visibility and control over cloud-based data. They can monitor data flows, enforce security policies, and often have DLP capabilities built-in, making them the ideal solution in this scenario.

References

ISACA Resources (Glossary): Definitions of Cloud Access Security Broker (CASB) highlight their role in cloud security and governance.

Industry Research (Gartner, etc.): Research on CASB tools emphasizes their ability to address visibility and control challenges for cloud data.

The success rate of social engineering attacks directly measures the behavioral changes resulting from an information security awareness program. Employees who are aware and informed are better equipped to identify and thwart such attacks.

Reduction in Reported Incidents (Option A):This may indicate underreporting rather than program effectiveness.

Reduction in Cost of Maintaining the Program (Option C):This reflects cost efficiency, not program effectiveness.

Reduction in Number of Attacks (Option D):The number of attacks is beyond the control of awareness programs and does not reflect their impact.

Shadow IT often arises when approved software does not meet user requirements (Option D), leading employees to seek alternative solutions.

ISACA CISA Reference: IT governance frameworks stress the need for user-centric IT policies to mitigate shadow IT risks.

Risk Implication: Shadow IT introduces security vulnerabilities, compliance risks, and potential data breaches.