Certified in the Governance of Enterprise IT (CGEIT) — Question 328

Which of the following is MOST important for an enterprise to review when classifying information assets?

Answer options

• A. Procedures for information handling
• B. Requirements for information retention
• C. Impact of information exposure
• D. Media used for storage and backup

Correct answer: C

Explanation

The correct answer, C, highlights the significance of understanding the potential impact of information exposure on the organization, which is critical for effective classification. While the other options are important, they focus more on procedures and requirements rather than the direct consequences of information breaches.