A company is enhancing its human risk management efforts to better prepare employees against social engineering threats. Which of the following initiatives directly support an effective security awareness program? (Select TWO.)
- Delivering targeted micro-learning modules to employees immediately following a policy compliance oversightAnswer
- Establishing simple, non-punitive escalation channels for personnel to report potential security concernsAnswer
- CConfiguring network intrusion prevention rules to isolate workstations that access unauthorized web domains
- DMandating daily password rotations for all staff to prevent credential harvesting attacks
Answer
The correct initiatives are delivering targeted micro-learning modules immediately following policy oversights and establishing simple, non-punitive escalation channels for reporting suspicious activities.
Delivering targeted micro-learning immediately after a user mistake provides timely education that reinforces security policy, while non-punitive reporting pathways foster an open culture that encourages prompt escalation of suspicious activity.
Step-by-Step Solution
Key Concept
Security Awareness Programs and Human Risk Management