Skip to content

ACCA Strategic Professional · Strategic Business Leader · IT systems security and control

Delta Foods stores customer records on laptops used by sales staff who travel. The IT director is concerned about the consequences if a laptop is stolen. Which control most directly reduces the risk of data disclosure in that event?

Full-disk encryption with pre-boot authentication most directly reduces disclosure risk, because stolen data remains unreadable without the key. Backups protect availability, antivirus addresses malware, and a reporting policy does not stop the thief from reading the data.

  1. AFull-disk encryption with pre-boot authenticationCorrect
  2. BDaily backup of the laptops to the cloud
  3. CAntivirus software with automatic updates
  4. DA policy requiring staff to report losses within 24 hours

Explanation

Full-disk encryption makes the stored data unreadable without the key, so a thief cannot disclose it. Backups address availability, not confidentiality. Antivirus targets malware, and a reporting policy is a detective or administrative step that does not prevent data being read.

Did you get it right without looking?

One question tells you little. A timed set on IT systems security and control shows your real accuracy, how long you take and where you lose marks.

Practise IT systems security and controlFree diagnostic mock

More IT systems security and control questions