CRISC: Certified in Risk and Information Systems ControlDemo

Question

When creating a response plan to address security incidents involving sensitive data loss, it is MOST important to:

A revalidate existing risk scenarios.
B revalidate current key risk indicators (KRIs).
C review the data classification policy.
D revise risk management procedures.

Explanation

The data classification policy defines which information is sensitive and the corresponding handling, protection, escalation, and notification requirements. Those requirements are essential for determining the appropriate response to a data-loss incident.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ463

Community Discussion