PROBLEM 1 – Network Access Control (20points)
(5 pts each)
a) An organization decided toimplement an education program using role-based training, and wantsto ensure that each role gets the necessary training based on therole. Which of the following best describes the responsibilities ofdata owners and indicates what training they need?
A) Ensuring data is backed up in accordance with the datapolicy.
B) Ensuring data is classified and labeled correctly.
C) Complying with laws related to privacy.
D) Understanding common threats, such as malware and phishingattacks.
b) Separation of duties (SoD) is a keyconcept of internal controls. Indicate two best answers from thefollowing list that are
OR
OR