Which of the following is the MOST appropriate procedure for an organization to use when classifying data?

A. Have the information security manager assign data classification levels.

B. Review data classification questionnaires completed by data owners.

C. Use results from business impact analyses to classify data.

D. Publish data classification templates on the corporate intranet.








 

Suggested Answer: B

Community Answer: C



This question is in CISA Certified Information Systems Auditor Exam
For getting Certified Information Systems Auditor (CISA) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.