Isaca Certified Information Systems Auditor CISA Question # 247 Topic 25 Discussion
CISA Exam Topic 25 Question 247 Discussion:
Question #: 247
Topic #: 25
A security review focused on data loss prevention (DLP) revealed the organization has no visibility to data stored in the cloud. What is the IS auditor ' s BEST recommendation to address this
issue?
A.
Enhance the firewall at the network perimeter.
B.
Implement a file system scanner to discover data stored in the cloud.
C.
Employ a cloud access security broker (CASB).
D.
Utilize a DLP tool on desktops to monitor user activities.
CASBs are specifically designed to enhance visibility and control over cloud-based data. They can monitor data flows, enforce security policies, and often have DLP capabilities built-in, making them the ideal solution in this scenario.
References
ISACA Resources (Glossary): Definitions of Cloud Access Security Broker (CASB) highlight their role in cloud security and governance.
Industry Research (Gartner, etc.): Research on CASB tools emphasizes their ability to address visibility and control challenges for cloud data.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit