Certified Information Systems Auditor (CISA) — Question 1410
Which of the following is MOST important when implementing a data classification program?
Answer options
- A. Planning for secure storage capacity
- B. Understanding the data classification levels
- C. Formalizing data ownership
- D. Developing a privacy policy
Correct answer: B
Explanation
Understanding the data classification levels is essential because it forms the foundation for how data will be handled, protected, and managed. While secure storage, formal ownership, and privacy policies are important, they all rely on a clear understanding of how data should be classified first.