CRISC · Question #46
Which of the following would BEST facilitate the implementation of data classification requirements?
The correct answer is B. Assigning a data owner. Assigning a data owner is the best way to facilitate the implementation of data classification requirements.
Question
Which of the following would BEST facilitate the implementation of data classification requirements?
Options
- AImplementing a data toss prevention (DLP) solution
- BAssigning a data owner
- CScheduling periodic audits
- DImplementing technical controls over the assets
How the community answered
(36 responses)- A14% (5)
- B72% (26)
- C6% (2)
- D8% (3)
Why each option
Assigning a data owner is the best way to facilitate the implementation of data classification requirements.
Implementing a Data Loss Prevention (DLP) solution is a technical control that *enforces* classification but doesn't define or facilitate the initial classification requirements or their consistent application.
Assigning a data owner is crucial because the data owner is ultimately responsible for defining the classification level of their data and ensuring appropriate controls are applied and maintained. This accountability provides the necessary leadership and decision-making authority to drive the practical implementation of data classification requirements throughout its lifecycle.
Scheduling periodic audits verifies compliance but does not facilitate the initial or ongoing implementation of the classification requirements themselves.
Implementing technical controls is the *result* of data classification, but assigning ownership is the foundational step that enables the classification decisions and subsequent control implementation.
Concept tested: Data classification implementation facilitation
Source: https://learn.microsoft.com/en-us/azure/purview/concept-data-ownership
Topics
Community Discussion
No community discussion yet for this question.