Certified Incident Handler (CIH) Practice Ecam

Which of the following practices will not help the HR department eradicate insider threats in an organization?

1. Conduct regular interviews and surveys for employees

2. Implement strict document control policies

3. Provide regular security training for staff

4. Never conduct interviews or surveys to allow employees to raise their concerns

The correct answer is: Never conduct interviews or surveys to allow employees to raise their concerns

The practice of not conducting interviews or surveys to allow employees to raise their concerns does not contribute to eradicating insider threats because it eliminates a vital channel for communication and feedback within the organization. Regular interviews and surveys serve as tools for identifying potential issues, fostering an open dialogue, and creating a culture of transparency. By ignoring these practices, the HR department misses opportunities to detect early warning signs of potential insider threats, gather employee perceptions about security practices, and address any areas of concern. In contrast, conducting interviews and surveys can help build trust and encourage employees to report suspicious behavior or concerns, ultimately enhancing the organization's ability to manage insider threats effectively. Therefore, the absence of such practices hinders the organization's overall security posture and undermines efforts to mitigate risks associated with insider threats.