Certified Information Systems Security Professional (CISSP) — Question 341
An employee's home address should be categorized according to which of the following references?
Answer options
- A. The consent form terms and conditions signed by employees
- B. An organization security plan for human resources
- C. Existing employee data classifications
- D. The organization's data classification model
Correct answer: D
Explanation
The correct answer is D because an organization's data classification model provides the guidelines for how different types of data, including an employee's home address, should be categorized. Options A, B, and C may provide relevant information but do not specifically define the classification criteria as the organization's data classification model does.