Certified Information Security Manager (CISM) — Question 1162

Which of the following will BEST enable an effective information asset classification process?

Answer options

• A. Reviewing the recovery time objective (RTO) requirements of the asset
• B. Assigning ownership
• C. Including security requirements in the classification process
• D. Analyzing audit findings

Correct answer: B

Explanation

Designating ownership is crucial because it establishes accountability for the information asset, ensuring that classification is taken seriously and accurately reflects its value. The other options, while relevant to asset management, do not directly impact the classification process in the same way that ownership does.