Which control best prevents unauthorized access to sensitive casino data?

Which control best prevents unauthorized access to sensitive casino data?

• A. Physical and logical access controls
• B. Taste testing of beverages
• C. Guest loyalty program updates
• D. Public signage and notices

Answer: (A)

Protecting data relies on layered safeguards that cover both the physical environment and the IT systems. Physical controls—badge readers, secure doors, restricted-access areas, and surveillance—prevent someone from even reaching the data centers or workstations where sensitive information is stored. Logical controls address who can use the systems themselves: strong authentication, multi-factor authentication, role-based access, encryption, and regular access reviews ensure that only authorized staff can view or manipulate data. In a casino, where sensitive information resides in secure facilities and on protected networks, pairing these two layers creates a robust defense against unauthorized access. The other options don’t address access to data or systems: taste testing of beverages is unrelated to data protection, updating a guest loyalty program is a marketing task, and public signage doesn’t prevent access to confidential information.

Protecting data relies on layered safeguards that cover both the physical environment and the IT systems. Physical controls—badge readers, secure doors, restricted-access areas, and surveillance—prevent someone from even reaching the data centers or workstations where sensitive information is stored. Logical controls address who can use the systems themselves: strong authentication, multi-factor authentication, role-based access, encryption, and regular access reviews ensure that only authorized staff can view or manipulate data. In a casino, where sensitive information resides in secure facilities and on protected networks, pairing these two layers creates a robust defense against unauthorized access. The other options don’t address access to data or systems: taste testing of beverages is unrelated to data protection, updating a guest loyalty program is a marketing task, and public signage doesn’t prevent access to confidential information.