An outside vulnerability assessment reveals that users have been routinely accessing Gmail from work for over a year, a clear violation of this organization's security policy. The users report ''it just started working one day''. Later, a network administrator admits he meant to unblock Gmail for just his own IP address, but he made a mistake in the firewall rule.
Which security control failed?
Audits are used to identify irregular activity in logged (after-the-fact) records. If this activity went unnoticed or uncorrected for over a year, the internal audits failed because they were either incomplete or inaccurate.
Authentication, access control and managing user rights would not apply as a network admin could be expected to have the ability to configure firewall rules.
Carisa
4 months agoTyra
4 months agoBette
4 months agoJanet
4 months agoAshleigh
5 months agoMarti
5 months agoBrice
5 months agoEdna
5 months agoMisty
5 months agoShonda
5 months agoSamuel
5 months agoMalcom
5 months ago