Which combination describes the security measures that protect a UDL's critical information and assets?

Which combination describes the security measures that protect a UDL's critical information and assets?

• A. Public messaging and press releases.
• B. Access control, encryption, asset tagging, personnel security, and incident response planning.
• C. Routine software updates and password changes.
• D. Training on ethics and compliance only.

Answer: (B)

A layered, defense-in-depth approach that covers people, data, and assets is what truly protects a UDL’s critical information. Start with access control to ensure only authorized personnel can reach sensitive systems and spaces, preventing unauthorized access. Encryption adds a safety net by making data unreadable if it’s exposed, whether at rest or in transit. Asset tagging helps keep an accurate inventory and custody record, so you can quickly locate and protect every physical item. Personnel security addresses the human element, reducing risk from insiders or compromised credentials. Incident response planning provides a clear, coordinated method to detect, contain, and recover from security events, limiting damage and downtime. Together, these elements create a comprehensive security posture that tackles prevention, detection, and response. The other options miss essential pieces or focus too narrowly. Public messaging offers no protective controls. Routine software updates and password changes are important but not sufficient on their own without broader controls. Training on ethics and compliance addresses behavior but doesn’t provide the technical and operational safeguards needed for robust protection.

A layered, defense-in-depth approach that covers people, data, and assets is what truly protects a UDL’s critical information. Start with access control to ensure only authorized personnel can reach sensitive systems and spaces, preventing unauthorized access. Encryption adds a safety net by making data unreadable if it’s exposed, whether at rest or in transit. Asset tagging helps keep an accurate inventory and custody record, so you can quickly locate and protect every physical item. Personnel security addresses the human element, reducing risk from insiders or compromised credentials. Incident response planning provides a clear, coordinated method to detect, contain, and recover from security events, limiting damage and downtime. Together, these elements create a comprehensive security posture that tackles prevention, detection, and response.

The other options miss essential pieces or focus too narrowly. Public messaging offers no protective controls. Routine software updates and password changes are important but not sufficient on their own without broader controls. Training on ethics and compliance addresses behavior but doesn’t provide the technical and operational safeguards needed for robust protection.