Certified Information Security Manager (CISM) — Question 937

A data discovery project uncovers an unclassified process document. Of the following, who is BEST suited to determine the classification?

Answer options

• A. Creator of the document
• B. Data custodian
• C. Information security manager
• D. Security policy author

Correct answer: A

Explanation

The creator of the document is typically the most knowledgeable about its contents and context, making them best suited to determine its classification. The data custodian manages data but may not have the specific insights needed for classification. The information security manager oversees security protocols but may not be familiar with the document details. The security policy author sets policies but does not classify individual documents.