CISSP Practice Question: Which security model is PRIMARILY designed to prevent conflicts of interest by…

Correct Answer: C. Brewer-Nash model

Explanation (CISSP Manager Logic):

The Brewer-Nash model, also known as the Chinese Wall model, is specifically designed to handle dynamic access control to prevent conflicts of interest. It ensures that a consultant or user cannot access data from competing organizations if they have already viewed data from one of those organizations.

By implementing this solution, you:

• Mitigate the risk of insider trading and ethical breaches.
• Enforce segregation of duties across different client datasets.
• Automate compliance with data isolation requirements.

While the other options are relevant, they fall short because:

• Bell-LaPadula model: Focuses on maintaining confidentiality through fixed clearance levels rather than dynamic conflict avoidance.
• Biba integrity model: Focuses on data integrity and preventing the unauthorized modification of data.
• Clark-Wilson model: Focuses on integrity through well-formed transactions and separation of duties in a business context, not dynamic conflict of interest.

Think like a manager:

Select models that align with specific organizational goals; when the goal is preventing ethical conflicts in multi-client environments, Brewer-Nash is the industry standard.