Certified Data Management Professional – Fundamentals (CDMP) — Question 7

Achieving security risk reduction in an organisation begins with developing what?

Answer options

• A. A classification model, classifying each data concept and locating the physical data
• B. A metadata model, locating the data and moving it into the metadata repository
• C. A security model, classifying each organisational role and putting the physical data behind a firewall
• D. A change management model, prioritising security changes and then updating the active directory
• E. An enterprise data model, rolling out data flow diagrams and embedding security into the database

Correct answer: A

Explanation

The correct answer is A because establishing a classification model is essential for identifying and categorizing data, which is the foundation for reducing security risks. The other options focus on different aspects of data management and security but do not directly address the initial classification necessary for risk mitigation.