Exam CGEIT topic 1 question 290 discussion

C. Information classification scheme

D. Application and data owners When creating an inventory of information systems and data related to the mobile app, identifying the application and data owners should be the FIRST step. Application and data owners are responsible for overseeing the development, maintenance, and security of the mobile app and its associated data. They are accountable for ensuring that the app complies with data privacy regulations and that user data is handled appropriately. By identifying the application and data owners first, the health tech enterprise can establish clear lines of responsibility and accountability for managing the mobile app and its data. This lays the foundation for effective data governance and compliance with data privacy regulations.

When creating an inventory of information systems and data related to the mobile app to ensure compliance with data privacy regulations, the FIRST consideration should be to identify the Application and data owners (Option D). Application owners are responsible for the development, maintenance, and overall ownership of the mobile app, while data owners are responsible for the specific data processed and stored by the app. Identifying application and data owners is crucial because it establishes accountability for the app and its associated data. These individuals or roles can provide insights into how data is collected, processed, stored, and shared, and can help ensure that data privacy regulations are adhered to throughout the app's lifecycle.

C is correct answers..... first the company needs to have a classification scheme that will help owners to classify his asset

below are the logical steps: 1. Inventory of Information Asset 2. Established ownership 3. Classification of resources/assets 4. Labelling 5. Access control list