Isaca
CISM · Question #744
Who should be responsible for determining the level of data classification required for an application related to a new line of business?
The correct answer is D. Data owners. Data owners are responsible for determining the appropriate level of data classification because they understand the business value and sensitivity of the data.
Submitted by lars.no· Apr 18, 2026Information Security Governance
Question
Who should be responsible for determining the level of data classification required for an application related to a new line of business?
Options
- AData custodian
- BInformation security officer (ISO)
- CData analyst
- DData owners
How the community answered
(42 responses)- A2% (1)
- B5% (2)
- C7% (3)
- D86% (36)
Explanation
Data owners are responsible for determining the appropriate level of data classification because they understand the business value and sensitivity of the data.
Topics
#Data classification#Roles and responsibilities#Data ownership#Information security governance
Community Discussion
No community discussion yet for this question.