Certified in the Governance of Enterprise IT (CGEIT) — Question 358

Which of the following would be MOST helpful to an enterprise that wants to standardize how sensitive corporate data is handled?

Answer options

• A. Enterprise risk management (ERM) framework
• B. Information classification framework
• C. Enterprise risk policy
• D. Information security policy

Correct answer: B

Explanation

The Information classification framework is critical as it provides a structured approach to categorizing sensitive data, ensuring proper handling according to its classification. Other options, like the Enterprise risk management framework and policies, may support risk management and security but do not specifically focus on standardizing data handling practices.