nerdexam
Isaca

CRISC · Question #208

The MAJOR reason to classify information assets is

The correct answer is B. determine their sensitivity and critical. The major reason for classifying information assets is to determine their sensitivity and criticality, which informs appropriate protection strategies.

Submitted by joshua94· Apr 18, 2026IT Risk Assessment

Question

The MAJOR reason to classify information assets is

Options

  • Amaintain a current inventory and catalog of information assets
  • Bdetermine their sensitivity and critical
  • Cestablish recovery time objectives (RTOs)
  • Dcategorize data into groups

How the community answered

(30 responses)
  • B
    90% (27)
  • C
    7% (2)
  • D
    3% (1)

Why each option

The major reason for classifying information assets is to determine their sensitivity and criticality, which informs appropriate protection strategies.

Amaintain a current inventory and catalog of information assets

Maintaining a current inventory and catalog of information assets is a necessary prerequisite for classification, but not the primary reason for performing the classification itself.

Bdetermine their sensitivity and criticalCorrect

Classifying information assets helps an organization understand the inherent value, confidentiality requirements (sensitivity), and operational importance (criticality) of its data, systems, and intellectual property. This understanding is fundamental for implementing appropriate security controls and protective measures that are commensurate with the asset's significance and potential impact if compromised.

Cestablish recovery time objectives (RTOs)

Establishing Recovery Time Objectives (RTOs) is an outcome derived from understanding an asset's criticality, which is determined through the classification process, but classification has a broader purpose beyond just recovery planning.

Dcategorize data into groups

Categorizing data into groups is the *process* of classification; the major *reason* for undertaking this process is to assess the sensitivity and criticality of those groups.

Concept tested: Information asset classification purpose

Source: https://learn.microsoft.com/en-us/azure/information-protection/what-is-information-protection

Topics

#Information Asset Classification#Data Sensitivity#Data Criticality#Risk Assessment Fundamentals

Community Discussion

No community discussion yet for this question.

Full CRISC Practice