Certified Information Security Manager (CISM) — Question 250

Which of the following is the MOST effective method of preventing deliberate internal security breaches?

Answer options

• A. Well-designed intrusion detection system (IDS)
• B. Biometric security access control
• C. Well-designed firewall system
• D. Screening prospective employees

Correct answer: D

Explanation

Screening prospective employees is crucial as it helps identify individuals with potentially harmful intentions before they are hired, thereby reducing the risk of internal security breaches. While biometric security access control and IDS are important for protecting against unauthorized access and detecting breaches, they do not prevent malicious insiders from entering the organization. A firewall is essential for external threats but does not address internal risks effectively.