CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ863

Information Security Program

An information security team is tasked with identifying confidential information across the organization in order to formalize its asset-classification scheme. The MOST relevant input would come from:

  • A business process owners.
  • B the legal department.
  • C the chief information officer (CIO).
  • D database administrators (DBAs).
Explanation

Business process owners understand the information used in their processes, its business value, and the impact of unauthorized disclosure. They are therefore the primary source for identifying data that should be classified as confidential.

Community Discussion

No comments yet. Be the first to start the discussion!