Employees have recently requested remote access to corporate email and shared drives. Remote
access has never been offered; however, the need to improve productivity and rapidly responding
to customer demands means staff now requires remote access. Which of the following controls will
BEST protect the corporate network?
A.
Develop a security policy that defines remote access requirements. Perform regular audits of
user accounts and reviews of system logs.
B.
Secure remote access systems to ensure shared drives are read only and access is provided
through a SSL portal. Perform regular audits of user accounts and reviews of system logs.
C.
Plan and develop security policies based on the assumption that external environments have
active hostile threats.
D.
Implement a DLP program to log data accessed by users connecting via remote access.
Regularly perform user revalidation.