Certified Information Systems Auditor (CISA) — Question 109

Which of the following would be of MOST concern when determining if information assets are adequately safeguarded during transport and disposal?

Answer options

• A. Lack of recent awareness training
• B. Lack of appropriate labeling
• C. Lack of appropriate data classification
• D. Lack of password protection

Correct answer: C

Explanation

The correct answer is C, as proper data classification is essential for ensuring that sensitive information is handled appropriately during transport and disposal. The other options, while important, do not directly address the risk of exposing classified data to unauthorized access during these critical phases.