Exam CISA topic 1 question 1057 discussion

A. Encryption of the data stored on the device The best preventive control to protect the confidentiality of data on a corporate smartphone in the event it is lost is to encrypt the data stored on the device. Encryption ensures that even if the device falls into the wrong hands, the data remains unreadable without the proper decryption key. This is a fundamental security measure for protecting data at rest on mobile devices and is considered a strong preventive control for maintaining data confidentiality. While options B (Remote data wipe program), C (Password for device authentication), and D (Biometric authentication for the device) are also important security measures, they are typically used in conjunction with encryption rather than as standalone preventive controls for data confidentiality.