Certified Information Systems Auditor (CISA) — Question 451

An organization wants to classify database tables according to its data classification scheme. From an IS auditor's perspective, the tables should be classified based on the:

Answer options

• A. specific functional contents of each single table.
• B. frequency of updates to the table.
• C. number of end users with access to the table.
• D. descriptions of column names in the table.

Correct answer: A

Explanation

The correct answer is A because classifying tables based on their specific functional contents directly aligns with the organization's data classification scheme, reflecting the sensitivity and purpose of the data. Options B, C, and D do not provide a comprehensive view of the data's classification needs and may overlook critical functional aspects.