CISM: Certified Information Security ManagerDemo

Question

Which of the following provides the MOST guidance when determining the appropriate level of protection for an information asset?

A Impact on information security program
B Cost of controls
C Impact to business function
D Cost to replace

Explanation

An information asset’s protection requirements are based primarily on the impact that its loss of confidentiality, integrity, or availability would have on the business function it supports. This business impact determines the appropriate classification and level of safeguards.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ657

Community Discussion