Certified Information Systems Auditor (CISA) — Question 966

Which of the following BEST describes the role of a document owner when implementing a data classification policy in an organization?

Answer options

• A. Classifies documents to correctly reflect the level of sensitivity of information they contain
• B. Ensures documents are handled in accordance with the sensitivity of information they contain
• C. Defines the conditions under which documents containing sensitive information may be transmitted
• D. Classifies documents in accordance with industry standards and best practices

Correct answer: A

Explanation

The correct answer, A, highlights that the document owner's main task is to categorize documents based on the sensitivity of their content. While the other options involve important duties related to document handling and compliance, they do not specifically focus on the classification process itself, which is the essence of the document owner's role.