Questions: The following are protective measures that you can take against an insider threat, EXCEPT FOR: A. Using appropriate screening processes to select new employees. B. Providing non-threatening and convenient ways for employees to report suspicions. C. Issuing universal systems access and credentials to all employees. D. Ensuring that access is terminated for employees leaving the organization.

The answer is C: Issuing universal systems access and credentials to all employees.

Explanation for each option:

A. Using appropriate screening processes to select new employees.

• This is a protective measure against insider threats as it helps ensure that new hires are trustworthy and suitable for the organization.

B. Providing non-threatening and convenient ways for employees to report suspicions.

• This is a protective measure because it encourages employees to report any suspicious behavior without fear of retaliation, helping to identify potential insider threats early.

C. Issuing universal systems access and credentials to all employees.

• This is not a protective measure. Granting universal access increases the risk of insider threats by allowing all employees access to sensitive information, regardless of their role or need to know.

D. Ensuring that access is terminated for employees leaving the organization.

• This is a protective measure as it prevents former employees from accessing the organization's systems and potentially causing harm.

In summary, option C is the exception as it does not contribute to protecting against insider threats.