Certified Information Security Manager (CISM) — Question 118

An organization has decided to store production data in a cloud environment. What should be the FIRST consideration?

Answer options

• A. Data transfer
• B. Data classification
• C. Data backup
• D. Data isolation

Correct answer: B

Explanation

The correct answer is B, as data classification is essential for understanding the sensitivity and compliance requirements of the data being stored. Options A, C, and D, while important, are secondary considerations that depend on the classification of the data to ensure it is handled appropriately.