nerdexam
(ISC)2

CISSP · Question #418

Which of the following entails identification of data end links to business processes, applications, and data stores as well as assignment of ownership responsibilities?

The correct answer is B. Security portfolio management. Security portfolio management is the process of identifying, classifying, and managing the data assets of an organization, as well as assigning ownership responsibilities and defining protection requirements. Security portfolio management entails identification of data and links

Submitted by asante_acc· Mar 5, 2026Security and Risk Management

Question

Which of the following entails identification of data end links to business processes, applications, and data stores as well as assignment of ownership responsibilities?

Options

  • ARisk management
  • BSecurity portfolio management
  • CSecurity governance
  • DRisk assessment

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    94% (30)
  • D
    3% (1)

Explanation

Security portfolio management is the process of identifying, classifying, and managing the data assets of an organization, as well as assigning ownership responsibilities and defining protection requirements. Security portfolio management entails identification of data and links to business processes, applications, and data stores, as well as assessment of data value, sensitivity, and risk. Security portfolio management can help an organization achieve data security, compliance, and governance objectives.

Topics

#data governance#asset ownership#security portfolio management

Community Discussion

No community discussion yet for this question.

Full CISSP Practice