Which control best reduces the residual risk of inadvertent disclosure of sensitive files stored on a laptop?

Which control best reduces the residual risk of inadvertent disclosure of sensitive files stored on a laptop?

• A. Performing a backup of sensitive files onto a remote server
• B. Setting the program to encrypt a particular partition
• C. Providing staff awareness training to identify and encrypt files
• D. Copying all encrypted files onto an externally attached USB drive

Answer: (C)

The control that best reduces the residual risk of inadvertent disclosure of sensitive files stored on a laptop involves providing staff awareness training to help employees identify and encrypt files. This approach not only ensures that staff are aware of the sensitivity of the information they are handling but also equips them with the necessary skills to implement encryption practices effectively. When employees understand the importance of protecting sensitive data and know how to properly apply encryption techniques, they are less likely to inadvertently disclose sensitive information. This proactive measure directly addresses human factors that often lead to security breaches. In contrast, performing a backup of sensitive files onto a remote server does not prevent inadvertent disclosures; it only creates copies of the files elsewhere, which might still be exposed. Setting a program to encrypt a particular partition on the laptop is beneficial but may not fully account for all sensitive files if staff do not consistently encrypt files themselves or use that partition effectively. Copying all encrypted files onto an externally attached USB drive can help with the transfer of secure files, but it does not mitigate the risk of improper disclosure if the files are not handled with care or if encryption is not uniformly applied. Overall, training staff raises awareness and empowers them to take appropriate actions to secure sensitive information, ultimately reducing the risk of inadvertent

The control that best reduces the residual risk of inadvertent disclosure of sensitive files stored on a laptop involves providing staff awareness training to help employees identify and encrypt files. This approach not only ensures that staff are aware of the sensitivity of the information they are handling but also equips them with the necessary skills to implement encryption practices effectively.

When employees understand the importance of protecting sensitive data and know how to properly apply encryption techniques, they are less likely to inadvertently disclose sensitive information. This proactive measure directly addresses human factors that often lead to security breaches.

In contrast, performing a backup of sensitive files onto a remote server does not prevent inadvertent disclosures; it only creates copies of the files elsewhere, which might still be exposed. Setting a program to encrypt a particular partition on the laptop is beneficial but may not fully account for all sensitive files if staff do not consistently encrypt files themselves or use that partition effectively. Copying all encrypted files onto an externally attached USB drive can help with the transfer of secure files, but it does not mitigate the risk of improper disclosure if the files are not handled with care or if encryption is not uniformly applied.

Overall, training staff raises awareness and empowers them to take appropriate actions to secure sensitive information, ultimately reducing the risk of inadvertent