Question

Information classification is a fundamental step in determining:

A. whether risk analysis objectives are met.
B. who has ownership of information.
C. the type of metrics that should be captured.
D. the security strategy that should be used.

Correct Answer: B????? or D?????????

______________________

Note

■ Some experts claim that the correct answer is: "B. who has ownership of information."

■ Other experts claim that the correct answer is: "D. the security strategy that should be used."

■ What do you think about that? Please explains: Why B and not D......or.......Why D or not B

Many thanks!

Answer 1

Answer:

Correct answer is D.

Explanation:

Classification of information gives you idea of the risk involved and upto what level it can be compromised so this again gives us the idea, which security strategy need to be use so the D is correct.

The owner of the data is the person who classify it not the other way around , the idea of information classification gives us idea who can have access but does not mean he owns that. So B is not correct.

Please give thumbsup, or do comment in case of any query. Thanks.