Question 78

Explanation

The correct answer: External assessments, also known as external audits, are performed by independent third parties who are not familiar with the organization's security systems. This allows them to identify potential vulnerabilities and weaknesses that may not be easily noticeable by those who are familiar with the systems. These assessments can provide valuable insights and recommendations for improving the organization's security posture. The incorrect answers: Conducting internal reviews: Internal reviews, or audits, are carried out by employees of the organization. They inspect systems, processes, and controls to ensure they meet internal standards and are effective. While valuable, internal reviews may sometimes miss vulnerabilities due to familiarity bias or lack of specialized expertise. Implementing encryption algorithms: Encryption helps protect data by transforming it into a code to prevent unauthorized access. While it's a crucial part of any security strategy to safeguard data, it doesn't actively identify vulnerabilities or weaknesses in the overall security system. Implementing firewalls: Firewalls are systems designed to prevent unauthorized access to or from a private network. They are essential for network security but are more preventive in nature and don't typically identify existing vulnerabilities or weaknesses in the broader security system.