Certified in Risk and Information Systems Control (CRISC) — Question 1198

Which of the following is the MOST important benefit of implementing a data classification program?

Answer options

• A. Reduction in processing times
• B. Identification of appropriate controls
• C. Reduction in data complexity
• D. Identification of appropriate ownership

Correct answer: B

Explanation

The identification of appropriate controls is crucial because it allows organizations to apply the right security measures based on the sensitivity of the data. While reduction in processing times, data complexity, and ownership are benefits, they do not directly address the core purpose of a data classification program, which is to ensure effective data protection through proper control measures.