Certified Information Security Manager (CISM) — Question 630

Who is BEST suited to determine how the information in a database should be classified?

Answer options

• A. Information security analyst
• B. Database analyst
• C. Database administrator (DBA)
• D. Data owner

Correct answer: D

Explanation

The Data owner is the individual who has the authority and responsibility to classify the information based on its sensitivity and importance. While the other roles provide valuable insights and support in managing data, they do not possess the final decision-making power regarding classification.