Which measures are required to reduce data breach risk?

Which measures are required to reduce data breach risk?

• A. No password policies
• B. Strong access controls, encryption, monitoring, backups, and training
• C. Single-factor authentication
• D. Physical security only

Answer: (B)

Reducing data breach risk requires a defense-in-depth approach that combines technical, organizational, and human factors. Strong access controls limit who can reach sensitive data, ensuring only authorized users have entry based on need-to-know. Encryption protects data at rest and in transit, so even if data is accessed or stolen, it remains unreadable. Monitoring provides visibility into unusual or unauthorized activity, enabling quick detection and response to incidents. Regular backups support recoverability, reducing the impact of events like ransomware or data loss, and ensure data can be restored accurately. Training builds resilience by reducing human errors and susceptibility to phishing or social engineering. Taken together, these measures address multiple breach paths and create multiple layers of protection, which is far more effective than relying on a single control. Choosing not to implement password policies allows weak credentials to proliferate, increasing the chance of credential compromise. Relying on single-factor authentication leaves accounts vulnerable if passwords are stolen or guessed. Relying on physical security alone neglects the digital aspects of data protection, such as access controls, encryption, and monitoring, which are essential to guard against cyber threats.

Reducing data breach risk requires a defense-in-depth approach that combines technical, organizational, and human factors. Strong access controls limit who can reach sensitive data, ensuring only authorized users have entry based on need-to-know. Encryption protects data at rest and in transit, so even if data is accessed or stolen, it remains unreadable. Monitoring provides visibility into unusual or unauthorized activity, enabling quick detection and response to incidents. Regular backups support recoverability, reducing the impact of events like ransomware or data loss, and ensure data can be restored accurately. Training builds resilience by reducing human errors and susceptibility to phishing or social engineering. Taken together, these measures address multiple breach paths and create multiple layers of protection, which is far more effective than relying on a single control.

Choosing not to implement password policies allows weak credentials to proliferate, increasing the chance of credential compromise. Relying on single-factor authentication leaves accounts vulnerable if passwords are stolen or guessed. Relying on physical security alone neglects the digital aspects of data protection, such as access controls, encryption, and monitoring, which are essential to guard against cyber threats.