Question

The Chief Information Security Officer (CISO) suspects that a database administrator has been tampering with financial data to the administrator's advantage.

Which of the following would allow a third-party consultant to conduct an on-site review of the administrator's activity?

A. Separation of duties
B. Job rotation
C. Continuous monitoring
D. Mandatory vacation

Answer 1

Continuous monitoring is the most effective option for a third-party consultant to conduct an on-site review of a database administrator's activity regarding suspected tampering with financial data.

Step-by-step explanation:

To allow a third-party consultant to conduct an on-site review of a database administrator's activity in this scenario, the most effective option would be continuous monitoring. This involves the ongoing monitoring and analysis of system activity to detect any suspicious or unauthorized behavior.

Continuous monitoring can help identify any tampering or misuse of financial data by the administrator. By regularly monitoring their activity, the consultant can gather evidence and determine if there is any wrongdoing.

Options such as separation of duties, job rotation, and mandatory vacation can also be beneficial in preventing and detecting fraud or misconduct, but they may not provide real-time or in-depth visibility into the specific actions of the administrator.