What is the first step in classifying data stored in an Information System?

The correct answer is C. Labeling. When classifying data that is already stored in an information system, the first actionable step is labeling - assigning a classification tag or marker (e.g., Public, Internal, Confidential, Secret) to the data. Labeling enables all subsequent classification-driven controls…

Security Principles

Question

Options

ASharing
BCollecting
CLabeling
DStoring

How the community answered

(43 responses)

A
5% (2)
B
2% (1)
C
93% (40)

Explanation

When classifying data that is already stored in an information system, the first actionable step is labeling - assigning a classification tag or marker (e.g., Public, Internal, Confidential, Secret) to the data. Labeling enables all subsequent classification-driven controls such as access restrictions, handling procedures, and retention policies. While data collection and storage occur earlier in the data lifecycle, within the classification process itself, labeling is the foundational first step. Sharing comes after classification controls are applied.

Topics

#Data Classification#Data Security#Information Security Principles#Data Governance

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice