CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ276

VerifiedSecurity and Risk Management

A hospital uses three data-classification levels: shareable without restrictions, shareable with restrictions, and internal use only. Which option BEST illustrates compliance with sound enterprise data-classification principles?

Explanation

Information classified as internal use only is appropriate for distribution within the hospital workforce, such as by posting an internal data-breach memo in an employee lunchroom. Restricted or internal information must not be exposed to patients, the public, or unsecured locations.

Community Discussion

No comments yet. Be the first to start the discussion!