A financial institution wants to reduce the risk of sensitive customer data exfiltration by employees. Which of the following would be the MOST effective measure to implement?
Enforcing the use of strong encryption protocols for data at rest.
Implementing monitoring and blocking of suspicious data transfers.
Disabling unused physical and logical service ports company-wide.
Segmenting the internal network based on departmental functions.
Enabling biometric authentication on all data systems.