Certified Information Systems Auditor (CISA) — Question 207

Which of the following areas is MOST likely to be overlooked when implementing a new data classification process?

Answer options

• A. Email attachments
• B. Data sent to vendors
• C. New system applications
• D. End-user computing (EUC) systems

Correct answer: D

Explanation

End-user computing (EUC) systems are often overlooked because organizations focus more on centralized systems and applications. Email attachments, data sent to vendors, and new system applications are typically scrutinized more rigorously as they directly involve data exchange and storage compliance. However, EUC systems can pose significant risks if not properly classified and managed.