During audit fieldwork, an IS auditor learns that employees are allowed to connect their personal devices to company-owned computers. How can the auditor
BEST validate that appropriate security controls are in place to prevent data loss?
- Verify the data loss prevention (DLP) tool is properly configured by the organization.
- Review compliance with data loss and applicable mobile device user acceptance policies.
- Verify employees have received appropriate mobile device security awareness training.
- Conduct a walk-through to view results of an employee plugging in a device to transfer confidential data.
Reveal Solution Next Question