Certified in Risk and Information Systems Control (CRISC) — Question 651

Which of the following would BEST facilitate the implementation of data classification requirements?

Answer options

• A. Implementing technical controls over the assets
• B. Implementing a data loss prevention (DLP) solution
• C. Scheduling periodic audits
• D. Assigning a data owner

Correct answer: D

Explanation

Assigning a data owner is crucial as it ensures accountability and responsibility for data classification and management. While technical controls and DLP solutions help protect data, they do not directly address the oversight and governance that a data owner provides. Periodic audits are useful for compliance but do not actively facilitate classification implementation.