Consider the following short case as you respond to the next question: Melissa is an internal auditor for the County of Bufflufia. Her job responsibilities include providing training on information systems security and checking the work of data entry clerks. Melissa is also part of a team that responds to denial-of-service attacks on the county's information system. Her co-worker, Eugene, ensures that all the county's computers have the most up-to-date antivirus software; he also enforces the county's policy of backing up sensitive data, such as employee social security numbers and other payroll information, at least once a day. The back-ups are dated and stored in a locked filing cabinet.Which of the following statements is most true?
A)Eugene's responsibilities span both physical and technical controls.
B)Melissa's responsibilities are related to at least one element of the CIA triad.
C)Both A and B are true.
D)Neither A nor B is true.

Question

Quizplus · Accepted Answer

Eugene's responsibilities include physical controls (ensuring that sensitive data is backed up and stored in a locked cabinet) and technical controls (ensuring that computers have up-to-date antivirus software). 
Melissa's responsibilities include information systems security training (relating to confidentiality) and checking the work of data entry clerks (relating to data integrity). Both of these responsibilities are related to at least one element of the CIA triad (confidentiality, integrity, availability). Therefore, both A and B are true.

Consider the Following Short Case as You Respond to the Next