The marketing department at Company A regularly sends out emails signed by the company’s
Chief Executive Officer (CEO) with announcements about the company. The CEO sends company
and personal emails from a different email account. During legal proceedings against the
company, the Chief Information Officer (CIO) must prove which emails came from the CEO and
which came from the marketing department. The email server allows emails to be digitally signed
and the corporate PKI provisioning allows for one certificate per user. The CEO did not share their
password with anyone. Which of the following will allow the CIO to state which emails the CEO
sent and which the marketing department sent?
A.
Identity proofing
B.
Non-repudiation
C.
Key escrow
D.
Digital rights management