An organization that uses the CoBIT framework to strengthen internal controls wants to improve the confidentiality of its information. Which of the following internal controls will best help achieve that goal?
A)Encryption
B)Security guards
C)Use of the COSO internal control framework
D)Adherence to the steps in the systems development life cycle

Question

Quizplus · Accepted Answer

Encryption is a process that transforms data into a secret code, which can only be decoded with the correct key. This is an effective way to protect the confidentiality of information, as unauthorized individuals cannot read or understand the encrypted data. The other options, such as security guards or using the COSO internal control framework, may also be useful for improving internal controls, but they do not specifically address the goal of improving confidentiality. Adherence to the steps in the systems development life cycle may help to ensure that security features are built into information systems, but it is not a specific internal control for improving confidentiality.

An Organization That Uses the CoBIT Framework to Strengthen Internal