CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Enterprise Resource Management
An Indian company's ERP holds customers' personal data. After an unauthorised download by an insider, the board asks which combination best reflects preventive plus detective governance, rather than only corrective action. Which is correct?
Role-based access limits with encryption are preventive, while log monitoring and alerts on bulk exports are detective. Together they cover prevention and detection before correction is needed. Backup restoration and apologies are corrective, and insurance or deleting logs neither prevents nor detects the insider download.
- ARole-based access limits and encryption (preventive), with log monitoring and alerts on bulk exports (detective)Correct
- BRestoring data from backup and issuing apology notices (both corrective)
- CAnnual staff picnic and policy printing (neither control type)
- DPurchasing cyber insurance and deleting all logs (both preventive)
Explanation
Preventive controls stop unauthorised access in advance (access limits, encryption); detective controls identify events as or after they occur (monitoring, alerts on bulk exports). Restoration and apologies are corrective. Insurance transfers risk and deleting logs destroys detection ability, so those fail the test.
Did you get it right without looking?
One question tells you little. A timed set on Enterprise Resource Management shows your real accuracy, how long you take and where you lose marks.
More Enterprise Resource Management questions
- A manufacturing company in Pune runs its ERP on servers installed in its own data centre, and its IT team handles all upgrades, patches and …
- Before go-live, a company runs its ERP on the old and new systems side by side for two months, then cuts over fully. A critical data-migrati…
- Kaveri Textiles Ltd. adopts an ERP, and its CS notes that employees' personal data and payroll now sit in one central database. Under the In…
- When a warehouse clerk posts a goods receipt against a purchase order in an integrated ERP, the inventory quantity rises and a corresponding…
- A company's ERP administrator discovers that a departed employee's user ID is still active and was used to view payroll data last week. Whic…
- In the classic three-tier ERP architecture, which arrangement correctly maps the tiers to their roles?