When classifying information, the primary goal is to ensure that the level of protection assigned to the data reflects its value and sensitivity to the organization. Therefore, classification should be based on business risk — including the potential impact of data disclosure, alteration, or loss.
Why not the others?
B. Data retention requirements
Retention is a complementary consideration, but it does not drive classification.
C. Industry standards
These provide guidance, but may not fully align with the specific risks and needs of the organization.
D. Security policy
The security policy should be based on the classification, not the other way around. Policies enforce classification schemes, not define them.
A. business risk.
This ensures that the classification reflects the potential impact of data loss or exposure on the organization, prioritizing protection based on the actual risks faced.
The classification of information assets functions like a label in determining the degree of control and management of information by value and importance.
Isn't the usual classification is High, Mid, and Low? These are all relating to risks right.
When classifying information, the most important consideration is to align the classification to business risk. Information classification involves categorizing data based on its level of sensitivity and importance.
Business risk is also an important consideration when classifying information, but it is typically addressed in the security policy. The security policy should identify the risks that the organization faces and the measures that should be implemented to mitigate those risks. The classification system should reflect the risks identified in the security policy, ensuring that sensitive data is protected appropriately.
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Greens
2 days, 10 hours agoMalsaffar
5 months, 4 weeks agoHenga
1 year agoSwallows
1 year, 2 months agodan08
1 year, 3 months agoAboodi000
1 year, 7 months ago[Removed]
1 year, 7 months agoshiowbah
1 year, 9 months agocidigi
1 year, 9 months ago3008
2 years ago3008
1 year, 12 months agomibg83
2 years ago