What is the role of personnel security in protecting assets?

• A. Training staff is unnecessary.
• B. Ignoring background checks.
• C. Relying solely on physical barriers.
• D. Screening, ongoing monitoring, training, and appropriate access controls to prevent misuse and risk from personnel.

Answer: (D)

Personnel security protects assets by actively managing the human element—screening, monitoring, training, and controlling access to ensure people do not misuse systems or create risk. Screening new hires through background checks helps prevent untrustworthy individuals from joining. Ongoing monitoring catches signs of risk or misconduct as they develop. Training ensures employees understand security policies and how to handle sensitive information correctly. Appropriate access controls ensure each person can only access what they need for their role. Together, these practices reduce the chance of internal misuse and align behavior with security objectives.

Relying only on physical barriers misses the people side of security, and claims that training is unnecessary or that background checks can be ignored leave serious gaps.