CGRC · Question #474
A specific category of information (e.g., privacy, medical, proprietary, financial, investigative, contractor sensitive, security management), defined by an organization or in some instances, by a…
The correct answer is A. Information Type. The description refers to an "Information Type," which is a specific category of information defined by an organization, law, or policy, such as privacy or financial data.
Question
A specific category of information (e.g., privacy, medical, proprietary, financial, investigative, contractor sensitive, security management), defined by an organization or in some instances, by a specific law, Executive Order, directive, policy, or regulation. Response:
Options
- AInformation Type
- BInformation System
- CInformation Security
- DNone of these
How the community answered
(34 responses)- A88% (30)
- B3% (1)
- C6% (2)
- D3% (1)
Why each option
The description refers to an "Information Type," which is a specific category of information defined by an organization, law, or policy, such as privacy or financial data.
An Information Type is a classification used to categorize specific data based on its content, sensitivity, and the regulations or policies governing it. This categorization is crucial for applying appropriate security controls and handling procedures according to the data's specific requirements, such as privacy or proprietary information.
An Information System is a collection of hardware, software, data, and personnel, not a category used to classify information itself.
Information Security refers to the protection of information assets, not a specific category or type of information.
Since 'Information Type' accurately defines the description, this option is incorrect.
Concept tested: Information classification and types
Source: csrc.nist.gov/glossary/term/information-type
Topics
Community Discussion
No community discussion yet for this question.