Certified Information Systems Auditor (CISA) — Question 920

Which of the following is MOST helpful to a data owner when classifying the organization's data?

Answer options

• A. Risk assessment results
• B. Existing protection levels
• C. Data retention policy
• D. Corporate privacy statement

Correct answer: A

Explanation

The correct answer is A, as risk assessment results provide insights into potential threats and vulnerabilities, which are crucial for effective data classification. The other options, while relevant, do not directly assist in understanding the risks associated with different types of data, making them less useful for classification purposes.