CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ9

VerifiedRisk Assessment

Because of budget limitations, an organization cannot implement encryption for all databases. Which of the following provides the MOST useful information for identifying high-risk databases where encryption should be applied?

Explanation

A data classification scheme identifies the sensitivity, regulatory requirements, and required protections for the information held in each database. Databases containing highly sensitive or regulated data can therefore be prioritized for encryption.

Community Discussion

No comments yet. Be the first to start the discussion!