CISSP · Question #418
Which of the following entails identification of data end links to business processes, applications, and data stores as well as assignment of ownership responsibilities?
The correct answer is B. Security portfolio management. Security portfolio management is the process of identifying, classifying, and managing the data assets of an organization, as well as assigning ownership responsibilities and defining protection requirements. Security portfolio management entails identification of data and links
Question
Which of the following entails identification of data end links to business processes, applications, and data stores as well as assignment of ownership responsibilities?
Options
- ARisk management
- BSecurity portfolio management
- CSecurity governance
- DRisk assessment
How the community answered
(32 responses)- A3% (1)
- B94% (30)
- D3% (1)
Explanation
Security portfolio management is the process of identifying, classifying, and managing the data assets of an organization, as well as assigning ownership responsibilities and defining protection requirements. Security portfolio management entails identification of data and links to business processes, applications, and data stores, as well as assessment of data value, sensitivity, and risk. Security portfolio management can help an organization achieve data security, compliance, and governance objectives.
Topics
Community Discussion
No community discussion yet for this question.