Exam CAS-004 topic 1 question 474 discussion

The security manager at the manufacturing facility would most likely identify the lack of a Non-Disclosure Agreement (NDA) with the company supporting its printers and multifunction devices during non-standard business hours as a risk. Printers and multifunction devices often store sensitive information, such as documents that are scanned, printed, or faxed. Without an NDA in place, there is a risk that the service provider could access or inadvertently expose this sensitive information. This could potentially lead to breaches of confidentiality and compromise the security of the organization's data.

In a manufacturing facility, especially one that operates 24 hours, ensuring that all devices have a verified and secure chain of custody is paramount. This ensures that devices have not been tampered with before they are deployed, which is crucial for maintaining the integrity and security of the operational environment. Without a secure chain of custody, there's a risk that devices could be compromised before they even reach the facility, leading to potential security breaches once they are in use.

This is a common issue