CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ153

Governance of Enterprise IT

An IT steering committee wants the enterprise’s mobile workforce to use cloud-based file storage to store non-sensitive corporate data, eliminating the need for remote access to that information. Before implementing this change, what should be included in the data management policy?

  • A A process for blocking access to cloud-based apps if inappropriate content is discovered
  • B A requirement to scan approved cloud-based apps for inappropriate content
  • C A mandate for periodic employee training on how to classify corporate data files
  • D A mandate for the encryption of all corporate data files at rest that contain sensitive data
Explanation

Employees need recurring training to correctly classify corporate files so that only non-sensitive data is stored in the cloud-based service. Data classification enables an organization to apply the appropriate protection and handling requirements to its data assets.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!