Certified Information Systems Auditor (CISA) — Question 1220

Which of the following is the MOST important outcome of the data classification process?

Answer options

• A. An access control matrix for data
• B. Enhanced data access logs
• C. A comprehensive inventory of data assets
• D. Identification of levels of protection

Correct answer: D

Explanation

The correct answer is D because identifying levels of protection is crucial for ensuring that data is adequately secured based on its classification. Options A, B, and C, while important, are secondary outcomes that support the main goal of establishing appropriate protection measures.