Which of the following will have the MOST influence on the definition and creation of data classification and data ownership policies?

Question

Options

• AData access control policies
• BThreat modeling
• CCommon Criteria (CC)
• DBusiness Impact Analysis (BIA)

• A
  18% (9)
• B
  8% (4)
• C
  4% (2)
• D
  70% (35)

Explanation

A Business Impact Analysis (BIA) is a process of identifying and assessing the potential effects of various disruptions on the critical business functions and processes. A BIA will help to determine the data classification and data ownership policies, as it will provide information on the value, sensitivity, and criticality of the data, as well as the roles and responsibilities of the data owners and custodians. Option A, data access control policies, are the policies that define the rules and mechanisms for granting or denying access to data, not the policies that define the data classification and data ownership. Option B, threat modeling, is a process of identifying and analyzing the threats and vulnerabilities that may affect the system or application, not the data. Option C, Common Criteria (CC), is a framework for evaluating and certifying the security of products and systems, not the data.

No community discussion yet for this question.