Which of the following solutions accomplishes the MOST of these goals?

Company A is trying to implement controls to reduce costs and time spent on litigation.

To accomplish this, Company A has established several goals:

– Prevent data breaches from lost/stolen assets

– Reduce time to fulfill e-discovery requests

– Prevent PII from leaving the network

– Lessen the network perimeter attack surface

– Reduce internal fraud

Which of the following solutions accomplishes the MOST of these goals?
A . Implement separation of duties; enable full encryption on USB devices and cell phones, allow cell phones to remotely connect to e-mail and network VPN, enforce a 90 day data retention policy.
B . Eliminate VPN access from remote devices. Restrict junior administrators to read-only shell access on network devices. Install virus scanning and SPAM filtering. Harden all servers with trusted OS extensions.
C . Create a change control process with stakeholder review board, implement separation of duties and mandatory vacation, create regular SAN snapshots, enable GPS tracking on all cell phones and laptops, and fully encrypt all email in transport.
D . Implement outgoing mail sanitation and incoming SPAM filtering. Allow VPN for mobile devices; cross train managers in multiple disciplines, ensure all corporate USB drives are provided by Company A and de-duplicate all server storage.

View Answer

Answer: A