Certified Information Systems Auditor (CISA) — Question 1114

What is the MOST effective way to detect installation of unauthorized software packages by employees?

Answer options

• A. Communicating the policy to employees
• B. Regular scanning of hard drives
• C. Logging of activity on the network
• D. Maintaining current antivirus software

Correct answer: B

Explanation

Regular scanning of hard drives allows for the detection of unauthorized software installations by examining the actual files present on the systems. While communicating policies and logging network activity are important, they do not provide direct evidence of software installation. Maintaining current antivirus software is crucial for security but does not specifically address the detection of unauthorized software packages.