Certified in Risk and Information Systems Control (CRISC) — Question 1169

Which of the following BEST mitigates the risk associated with sensitive data loss due to theft of an organization's removable media?

Answer options

• A. Data encryption
• B. Asset management policy
• C. Code of conduct policy
• D. Data loss prevention (DLP) system

Correct answer: A

Explanation

Data encryption is the best option as it protects sensitive information by converting it into a secure format that is unreadable without the proper key. While an asset management policy, code of conduct policy, and DLP systems can contribute to overall security, they do not directly secure the data on removable media as effectively as encryption does.