Which of the following should be done FIRST to ensure that a data loss prevention (DLP) process is appropriately implemented?

The correct answer is B. Classify the data stored on its systems. The first step in implementing a data loss prevention (DLP) process is to classify the data stored on the systems. Understanding the types of data, their sensitivity, and how they should be protected is essential before establishing controls, monitoring, and prevention…

Submitted by dimitri_ru· Apr 18, 2026Protection of Information Assets

Question

Options

ADetermine methods used to transmit data
BClassify the data stored on its systems
CIdentify the locations of the data on its systems
DMeasure the volume of data stored

How the community answered

(57 responses)

A
16% (9)
B
75% (43)
C
5% (3)
D
4% (2)

Explanation

The first step in implementing a data loss prevention (DLP) process is to classify the data stored on the systems. Understanding the types of data, their sensitivity, and how they should be protected is essential before establishing controls, monitoring, and prevention mechanisms.

Topics

#Data Loss Prevention (DLP)#Data Classification#Information Asset Protection#Security Program Implementation

Community Discussion

No community discussion yet for this question.

Full CISA Practice