Certified in the Governance of Enterprise IT (CGEIT) — Question 237

Which of the following is the BEST indication that information security requirements are taken into consideration when developing IT processes?

Answer options

• A. The information architecture incorporates data classification.
• B. The integrity of sensitive information is periodically reviewed.
• C. The database is deployed in a distributed processing platform.
• D. Customer profiles are stored with a domestic service provider.

Correct answer: A

Explanation

Option A is correct because incorporating data classification into the information architecture demonstrates that security needs are a priority in the IT process. The other options, while relevant to information security, do not directly reflect the integration of security requirements into the development of IT processes.