CRISC · Question #208
The MAJOR reason to classify information assets is
The correct answer is B. determine their sensitivity and critical. The major reason for classifying information assets is to determine their sensitivity and criticality, which informs appropriate protection strategies.
Question
The MAJOR reason to classify information assets is
Options
- Amaintain a current inventory and catalog of information assets
- Bdetermine their sensitivity and critical
- Cestablish recovery time objectives (RTOs)
- Dcategorize data into groups
How the community answered
(30 responses)- B90% (27)
- C7% (2)
- D3% (1)
Why each option
The major reason for classifying information assets is to determine their sensitivity and criticality, which informs appropriate protection strategies.
Maintaining a current inventory and catalog of information assets is a necessary prerequisite for classification, but not the primary reason for performing the classification itself.
Classifying information assets helps an organization understand the inherent value, confidentiality requirements (sensitivity), and operational importance (criticality) of its data, systems, and intellectual property. This understanding is fundamental for implementing appropriate security controls and protective measures that are commensurate with the asset's significance and potential impact if compromised.
Establishing Recovery Time Objectives (RTOs) is an outcome derived from understanding an asset's criticality, which is determined through the classification process, but classification has a broader purpose beyond just recovery planning.
Categorizing data into groups is the *process* of classification; the major *reason* for undertaking this process is to assess the sensitivity and criticality of those groups.
Concept tested: Information asset classification purpose
Source: https://learn.microsoft.com/en-us/azure/information-protection/what-is-information-protection
Topics
Community Discussion
No community discussion yet for this question.