Certified in Risk and Information Systems Control (CRISC) — Question 961

The MAJOR reason to classify information assets is to:

Answer options

• A. categorize data into groups.
• B. maintain a current inventory and catalog of information assets.
• C. determine their sensitivity and criticality.
• D. establish recovery time objectives (RTOs).

Correct answer: C

Explanation

The correct answer is C, as classifying information assets helps to assess their sensitivity and importance, which is crucial for risk management. Options A and B, while relevant, focus on organization and inventory rather than sensitivity assessment, and D refers specifically to recovery objectives, which are not the primary reason for classification.