Exam CISA topic 1 question 894 discussion

B. Distributing disciplinary policies Distributing disciplinary policies is a deterrent security control that reduces the likelihood of an insider threat event. By clearly communicating the consequences of insider threats through disciplinary policies, organizations can discourage employees from engaging in malicious or unauthorized activities. This control establishes expectations for behavior and serves as a deterrent against insider threats by making employees aware of the potential consequences they may face if they engage in malicious actions. The other options (A, C, and D) are not necessarily deterrent controls