Assessment of Skills and Knowledge(ASK) in Fundamental Business Concepts Practice Test

What action can be taken to enhance the security of data within a company’s computer system?

1. Allowing unrestricted access

2. Using generic passwords for all employees

3. Limiting access to sensitive information

4. Eliminating security protocols

The correct answer is: Limiting access to sensitive information

Limiting access to sensitive information is a critical action for enhancing the security of data within a company's computer system. By restricting access to only those individuals who need it to perform their job functions, organizations can significantly reduce the risk of unauthorized data exposure or breaches. This principle is known as the principle of least privilege, where users are granted the minimal levels of access necessary for their tasks. Implementing such restrictions helps safeguard sensitive data against potential internal threats and reduces the vulnerability to external attacks. Furthermore, it fosters an environment of accountability, as it becomes easier to track who accessed what data and when, allowing for better management of data security and compliance with regulations. Conversely, providing unrestricted access, using generic passwords, or eliminating security protocols would leave the system vulnerable to various threats and compromises, making it easier for unauthorized users to access sensitive information. These actions would contradict the foundational principles of data security and risk management.