A company is enhancing its human risk management efforts to better prepare employees against social engineering threats. Which of the following initiatives directly support an effective security awareness program? (Select TWO.)
- Delivering targeted micro-learning modules to employees immediately following a policy compliance oversightCevap
- Establishing simple, non-punitive escalation channels for personnel to report potential security concernsCevap
- CConfiguring network intrusion prevention rules to isolate workstations that access unauthorized web domains
- DMandating daily password rotations for all staff to prevent credential harvesting attacks
Cevap
The correct initiatives are delivering targeted micro-learning modules immediately following policy oversights and establishing simple, non-punitive escalation channels for reporting suspicious activities.
Delivering targeted micro-learning immediately after a user mistake provides timely education that reinforces security policy, while non-punitive reporting pathways foster an open culture that encourages prompt escalation of suspicious activity.
Adım Adım Çözüm
Anahtar Kavram
Security Awareness Programs and Human Risk Management