When performing a data classification project, an information security manager should:

The correct answer is A. identify information owners.. The first step in a data classification project is to identify information owners, as they are responsible for determining the classification level (e.g., public, confidential) of the data they own. Only after owners are identified can the classification, access privileges, and c

Submitted by yasin.bd· Apr 18, 2026Information Security Governance

Question

Options

Aidentify information owners.
Bassign information access privileges.
Cidentify information custodians.
Dassign information criticality and sensitivity.

How the community answered

(39 responses)

A
90% (35)
B
3% (1)
C
3% (1)
D
5% (2)

Explanation

The first step in a data classification project is to identify information owners, as they are responsible for determining the classification level (e.g., public, confidential) of the data they own. Only after owners are identified can the classification, access privileges, and custodianship be properly assigned.

Topics

#Data Classification#Information Owners#Roles and Responsibilities#Information Governance

Community Discussion

No community discussion yet for this question.

Full CISM Practice