Certified Information Security Manager (CISM) — Question 264

Which of the following should be the PRIMARY consideration when implementing a data loss prevention (DLP) solution?

Answer options

• A. Data ownership
• B. Data storage capabilities
• C. Data classification
• D. Selection of tools

Correct answer: C

Explanation

The primary consideration when implementing a DLP solution is data classification, as it helps identify and categorize sensitive information that needs protection. While data ownership, storage capabilities, and tool selection are important, they are secondary to understanding what data needs to be safeguarded.