A Chief Information Security Officer (CISO) Has Tasked a Security

question 1163

Multiple Choice

A Chief Information Security Officer (CISO) has tasked a security analyst with assessing the security posture of an organization and which internal factors would contribute to a security compromise. The analyst performs a walk-through of the organization and discovers there are multiple instances of unlabeled optical media on office desks. Employees in the vicinity either do not claim ownership or disavow any knowledge concerning who owns the media. Which of the following is the MOST immediate action to be taken?

• A) Confiscate the media and dispose of it in a secure manner as per company policy.
• B) Confiscate the media, insert it into a computer, find out what is on the disc, and then label it and return it to where it was found.
• C) Confiscate the media and wait for the owner to claim it. If it is not claimed within one month, shred it.
• D) Confiscate the media, insert it into a computer, make a copy of the disc, and then return the original to where it was found.

---

Definitions:

U.S. GAAP

The Generally Accepted Accounting Principles in the United States, a standard framework of guidelines for financial accounting used in any jurisdiction, including the rules and standards for corporate financial reports.

Interest Expense

The cost incurred by an entity for borrowed funds over a period of time.