Certified in Risk and Information Systems Control (CRISC) — Question 931

Which of the following BEST reduces the risk associated with the theft of a laptop containing sensitive information?

Answer options

• A. Data encryption
• B. Biometrics access control
• C. Periodic backup
• D. Cable lock

Correct answer: A

Explanation

Data encryption is the most effective way to protect sensitive information on a stolen laptop because it ensures that unauthorized users cannot access the data without the decryption key. While biometrics access control adds a layer of security, it does not protect the data if the device is stolen. Periodic backups and cable locks do not prevent theft or protect the information directly.