QuestionQ228

Information Security Program

Which of the following must be established FIRST to categorize data correctly?

  • A A data protection policy
  • B A data flow diagram
  • C A data classification framework
  • D A data custodian
Explanation

A data classification framework defines the categories, criteria, and rules used to assign data to classifications consistently. Data protection policies, flow diagrams, and custodians can support governance and handling, but they do not establish the classification scheme itself.

Community Discussion

No comments yet. Be the first to start the discussion!