Câu 530: CISA: Certified Information Systems Auditor

A review of Internet security disclosed that users have individual user accounts with Internet service providers (ISPs) and use these accounts for downloading business data. The organization wants to ensure that only the corporate network is used. The organization should FIRST:

1. A. use a proxy server to filter out Internet sites that should not be accessed.
2. B. keep a manual log of Internet access.
3. C. include a statement in its security policy about Internet use. — đáp án hiện tại
4. D. monitor remote access activities.