Which mitigation method focuses on detecting threats from removable media?

Study for the NERC CIP v7 Exam. Engage with interactive scenarios and multiple choice questions, all with detailed explanations. Prepare for your exam with confidence!

The correct choice centers on the importance of identifying and managing threats posed by removable media, such as USB drives or external hard disks. This method emphasizes the need for systems to have the capability of recognizing and assessing the risks that these devices can introduce into a network.

Cyber Asset detection methods specifically include processes and technologies that facilitate the discovery of connected devices and assess their compliance and security posture. By detecting and monitoring removable media, organizations can help mitigate risks associated with malware or unauthorized access that could occur when such devices are connected to cyber assets.

While antivirus software can help detect malicious software that may come from removable media, it doesn't specifically focus on detection in the same comprehensive manner. Physical security measures might safeguard against unauthorized physical access to systems, but they do not directly address the identification of threats from removable media. Application whitelisting is a preventive measure that restricts software that can run on a system but, again, does not specifically target the detection of threats from removable media.

Thus, the emphasis of the correct response lies in its proactive nature in identifying and managing threats from removable media, which is vital for ensuring robust cybersecurity within organizations.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy