Several employees have been printing files that include personally identifiable information of
customers. Auditors have raised concerns about the destruction of these hard copies after they
are created, and management has decided the best way to address this concern is by preventing
these files from being printed.
Which of the following would be the BEST control to implement?

A.
File encryption

B.
Printer hardening

C.
Clean desk policies

D.
Data loss prevention

Explanation:
Data loss prevention (DLP) systems monitor the contents of systems (workstations, servers, and
networks) to make sure that key content is not deleted or removed. They also monitor who is using
the data (looking for unauthorized access) and transmitting the data. This would address the
concerns of the auditors.