Question

During a physical walkthrough of an open-plan office, an IS auditor observes several workstations left unlocked and unattended, with printed customer records visible on desks and sticky notes containing passwords attached to monitors. Which control would BEST address the root cause of these observations?

Accepted Answer

Implementing and enforcing a clean desk and clear screen policy with automatic session lock

Answer

Deploying full-disk encryption on all workstations

Answer

Installing surveillance cameras throughout the office floor

Answer

Requiring multifactor authentication for network logon