CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ992

Information Security Risk Management

Which of the following is the primary objective of classifying information assets?

  • A Threat minimization
  • B Vulnerability reduction
  • C Risk management
  • D Compliance management
Explanation

Information asset classification establishes the sensitivity, value, and required handling of information so that protections and resources can be applied in proportion to the associated risk. This makes risk management the primary objective.

Community Discussion

No comments yet. Be the first to start the discussion!