An outside vulnerability assessment reveals that users have been routinely accessing Gmail from work for over a year, a clear violation of this organization's security policy. The users report ''it just started working one day''. Later, a network administrator admits he meant to unblock Gmail for just his own IP address, but he made a mistake in the firewall rule.
Which security control failed?
Audits are used to identify irregular activity in logged (after-the-fact) records. If this activity went unnoticed or uncorrected for over a year, the internal audits failed because they were either incomplete or inaccurate.
Authentication, access control and managing user rights would not apply as a network admin could be expected to have the ability to configure firewall rules.
Carisa
9 months agoTyra
9 months agoBette
10 months agoJanet
10 months agoAshleigh
10 months agoMarti
10 months agoBrice
10 months agoEdna
10 months agoMisty
10 months agoShonda
10 months agoSamuel
10 months agoMalcom
10 months ago