Question

A financial services firm discovers that unauthorized modifications to transaction records could go undetected for weeks. Regulators require the firm to demonstrate that stored transaction data has not been altered without authorization. The CISO is asked to recommend the control that most directly addresses this specific concern. Which control should the CISO prioritize?

Accepted Answer

Implementing cryptographic hashing with digital signatures on transaction records

Answer

Encrypting the transaction database at rest to protect confidentiality

Answer

Deploying redundant database servers with automatic failover

Answer

Enforcing multifactor authentication for all database administrators