Examkin

Question

Difficulty: EasySecurity Awareness Programs and Human Risk Management

A security administrator discovers that members of the financial operations team are being targeted by fraudulent wire transfer requests disguised as emails from executive leadership. Which of the following represents the most effective human risk management control to mitigate this threat?

  1. Conducting role-based security training focused on out-of-band transaction verification proceduresAnswer
  2. B
    Deploying network firewalls to filter database query traffic
  3. C
    Reclassifying the enterprise security policy as a deterrent physical control
  4. D
    Providing mandatory training on identifying voice-based vishing over mobile phones

Answer

Conducting role-based security training focused on out-of-band transaction verification procedures
Role-based security awareness training provides targeted instruction tailored to specific job responsibilities. For employees handling financial transfers, training them on out-of-band verification (confirming requests through a separate, trusted channel) directly addresses human risk associated with Business Email Compromise (BEC) attacks.

Step-by-Step Solution

1
Analyze the threat vector described in the scenario
Identified a Business Email Compromise (BEC) attack targeting financial staff via spoofed executive emails.
Understanding the specific attack vector is essential to selecting an appropriate control.
2
Evaluate human risk mitigation options
Selected role-based security awareness training that addresses the specific business process (wire transfers) and emphasizes out-of-band verification.
General or mismatched training does not build the specific operational safeguards needed by high-risk job roles.

Key Concept

Role-Based Security Awareness Training
Rate this question

Topics

Security Awareness Programs and Human Risk Management

More questions from this topic