ISC2 Certified in Cybersecurity (CC)Security OperationsMedium
A software development company is experiencing a high turnover rate among its developers. The security team is concerned about the potential for former employees to retain access to sensitive source code repositories and development environments. Which security operation should be prioritized to mitigate this specific risk efficiently?
- ASecurity Assessments
- BPersonnel Security
- CSecurity Monitoring
- DAsset Management
Show answer & explanationAnswer & explanation
Correct answer: B. Personnel Security
Personnel security focuses on managing the human element of security, including onboarding, offboarding, and access management for employees. Addressing the risk of former employees retaining access falls directly under personnel security's offboarding procedures.
Why the other options are wrong
- A. Security assessments evaluate overall security posture, not specific employee turnover risks.
- C. Security monitoring detects incidents, but personnel security prevents unauthorized access proactively.
- D. Asset management tracks assets but doesn't manage employee access directly.
Personnel Security
Measures designed to ensure that individuals with access to an organization's assets are trustworthy and that their access is appropriately managed throughout their employment lifecycle.
- Covers background checks, onboarding, and offboarding.
- Manages access privileges.
- Aims to prevent insider threats.
Memory trick: People's Access Protects Privacy.