Certified Information Systems Auditor (CISA) — Question 917

Which of the following processes is MOST important to define within a data classification policy?

Answer options

• A. Auditing access to data assets
• B. Backing up data assets
• C. Disposing of data assets
• D. Recovering data assets

Correct answer: A

Explanation

Auditing access to data assets is essential in a data classification policy as it helps ensure that sensitive information is accessed and managed appropriately. While backing up, disposing, and recovering data assets are also important processes, they do not directly address the ongoing management and security of data access, which is critical for maintaining data integrity and compliance.