Which of the following should be done FIRST when defining responsibilities for ownership of information and systems?

A. Require an inventory of information assets.

B. Identify systems that are outsourced.

C. Require an information risk assessment.

D. Ensure information is classified.








 

Suggested Answer: A

Community Answer: A



This question is in CGEIT Certified in the Governance of Enterprise IT Exam
For getting Certified in the Governance of Enterprise IT (CGEIT) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.