Certified Information Systems Auditor (CISA) — Question 998

Which of the following is the GREATEST benefit of an effective data classification process?

Answer options

• A. Data retention periods are well defined.
• B. Data is protected according to its sensitivity.
• C. Data custodians are identified.
• D. Appropriate ownership over data is assigned.

Correct answer: B

Explanation

The primary benefit of an effective data classification process is that it ensures data is protected according to its sensitivity, which minimizes the risk of unauthorized access and data breaches. While defining data retention periods, identifying data custodians, and assigning ownership are important, they do not directly address the critical need for protection based on sensitivity.