A Chief Information Security Officer (CISO) needs to establish a KRI for a particular system. The system holds archives of contracts that are no longer in use. The contracts contain intellectual property and have a data classification of non-public. Which of the following be the BEST risk indicator for this system?
A) Average minutes of downtime per quarter
B) Percent of patches applied in the past 30 days
C) Count of login failures per week
D) Number of accounts accessing the system per day

Question

Quizplus · Accepted Answer

The number of accounts accessing the system per day is a good indicator of potential unauthorized access or misuse, especially for a system containing sensitive, non-public data.

A Chief Information Security Officer (CISO) Needs to Establish a KRI