CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ93

Protection of Information Assets

During an audit of a small organization's data-classification processes and procedures, an IS auditor observes that data is frequently assigned an incorrect classification level. What is the MOST effective way for the organization to improve this situation?

Explanation

Data owners have the business knowledge and accountability needed to assign classifications that reflect the data's sensitivity, value, and handling requirements. Targeted training equips them to apply classification criteria consistently and correct recurring classification errors.

Community Discussion

No comments yet. Be the first to start the discussion!