CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ372

Technology and Security

Which of the following would BEST support implementation of data-classification requirements?

  • A Implementing technical controls over the assets
  • B Implementing a data loss prevention (DLP) solution
  • C Scheduling periodic audits
  • D Assigning a data owner
Explanation

A data owner is accountable for determining and maintaining the appropriate classification of organizational data. Controls such as DLP and audits can enforce or validate that classification after it has been assigned.

Community Discussion

No comments yet. Be the first to start the discussion!