CISM Certified Information Security Manager – Question0457

An organization plans to implement a document collaboration solution to allow employees to share company information. Which of the following is the MOST important control to mitigate the risk associated with the new solution?

A.
Assign write access to data owners.
B. Allow a minimum number of user access to the solution.
C. Have data owners perform regular user access reviews.
D. Permit only non-sensitive information on the solution.

Correct Answer: C