Certified Information Security Manager (CISM) — Question 998

Which of the following BEST determines an information asset's classification?

Answer options

• A. Criticality to a business process
• B. Value of the information asset in the marketplace
• D. Risk assessment from the data owner
• E. Cost of producing the information asset

Correct answer: A

Explanation

The best way to classify an information asset is based on its criticality to a business process, as it directly influences operational effectiveness and decision-making. While the marketplace value, risk assessments, and production costs are relevant, they do not provide a comprehensive measure of how vital the asset is to the organization’s core functions.