Exam CGEIT topic 1 question 437 discussion

B. Information classification framework An information classification framework would be MOST helpful to an enterprise that wants to standardize how sensitive corporate data is handled. An information classification framework defines categories or levels of sensitivity for corporate data and provides guidelines for how data in each category should be handled, stored, transmitted, and protected. It helps employees understand the importance of different types of data and ensures that appropriate security measures are applied based on the level of sensitivity.

The MOST helpful option for an enterprise that wants to standardize how sensitive corporate data is handled would be an Information Classification Framework (Option B). An Information Classification Framework helps categorize and label data based on its sensitivity, ensuring that appropriate safeguards and handling procedures are applied to different types of information.

The answer is B: Information classification framework. An information classification framework is a set of rules and guidelines for classifying information based on its sensitivity. This helps to ensure that sensitive information is handled appropriately and that only authorized individuals have access to it.

to its level of sensitivity, criticality, and confidentiality. It helps organizations identify, label, and protect sensitive information based on the level of risk associated with the data. This framework is particularly useful for standardizing how sensitive corporate data is handled, as it provides a consistent method for identifying and classifying sensitive information and determining how it should be handled.

Why not B?