ITPEC FE Morning April 2018 Question 59

Document Security Audit — Identifying the right checkpoint for auditing risks of information leakage, falsification, and unauthorized use of system documents.

The correct answer is c) Taking measures in order to ensure the confidentiality of documents.

The question focuses on three specific risks: leakage, falsification, and unauthorized use — all of which are confidentiality and integrity concerns. The appropriate audit checkpoint must directly address protecting documents from these threats.

Why not the others:
- a) Creating documents during prototype development relates to documentation completeness, not security.
- b) Standardizing documents addresses format consistency, not protection against leakage or tampering.
- d) Updating documents without delay concerns currency/accuracy of information, not access control or confidentiality.

Key rule: When an audit question mentions leakage, falsification, or unauthorized access, the correct checkpoint will always relate to confidentiality measures (access control, classification, encryption), not to document quality or timeliness.

AI-generated — may contain errors