In a financial institution, who has the responsibility for assigning the classification to a piece of information?

Question

Options

• AChief Financial Officer (CFO)
• BChief Information Security Officer (CISO)
• COriginator or nominated owner of the information
• DDepartment head responsible for ensuring the protection of the information

• A
  2% (1)
• B
  7% (3)
• C
  87% (39)
• D
  4% (2)

Explanation

In a financial institution, the responsibility for assigning the classification to a piece of information belongs to the originator or nominated owner of the information. The originator is the person who creates or generates the information, and the nominated owner is the person who is assigned the accountability and authority for the information by the management. The originator or nominated owner is the best person to determine the value and sensitivity of the information, and to assign the appropriate classification level based on the criteria and guidelines established by the organization. The originator or nominated owner is also responsible for reviewing and updating the classification as needed, and for ensuring that the information is handled and protected according to its classification.

No community discussion yet for this question.