Exam CISA topic 1 question 881 discussion

The BEST method to detect unauthorized disclosure of confidential documents sent over corporate email would be option A: Monitoring all emails based on pre-defined criteria. This method involves actively monitoring all emails that are sent through the corporate email system and flagging those that meet specific pre-defined criteria for further review. This allows organizations to identify potential unauthorized disclosures in real-time or after the fact. Criteria can include keywords, file types, recipient lists, or other suspicious patterns of communication. While each of these measures can contribute to overall email security, option A is the most effective for detecting unauthorized disclosures specifically. However, organizations often use a combination of these methods to enhance email security comprehensively.

Agree on A, Monitor under define critical should be best way

I would go with A here

A is the right answer. Monitoring all emails based on pre-defined criteria