Certified Information Systems Auditor (CISA) — Question 1297

Which of the following is the MOST important prerequisite for the protection of physical information assets in a data center?

Answer options

• A. Knowledge of the IT staff regarding data protection requirements
• B. Complete and accurate list of information assets that have been deployed
• C. Segregation of duties between staff ordering and staff receiving information assets
• D. Availability and testing of onsite backup generators

Correct answer: B

Explanation

A complete and accurate list of information assets is essential because it enables effective tracking and management of what needs protection. While knowledge of data protection requirements and segregation of duties are important, they do not directly address the identification and inventorying of assets, which is foundational for any protective measures. Backup generators are critical for operations but do not pertain specifically to the protection of physical information assets.