SSCP: Systems Security Certified PractitionerDemo

By ISC · Question Mode

QuestionQ817

Security Concepts and Practices

Which of the following should be done FIRST to protect the confidentiality of data?

  • A Install a firewall
  • B Implement encryption
  • C Identify which information is sensitive
  • D Review all user access rights
Explanation

Sensitive information must be identified before suitable confidentiality controls can be selected and applied. Data classification establishes which information needs protections such as encryption, access controls, and network safeguards.

Community Discussion

No comments yet. Be the first to start the discussion!