CRISC · Question #58
Which of the following would BEST facilitate the implementation of data classification requirements?
The correct answer is A. Assigning a data owner. Assigning a data owner would best facilitate the implementation of data classification requirements, as the data owner is responsible for determining the classification and ensuring its proper handling.
Question
Which of the following would BEST facilitate the implementation of data classification requirements?
Options
- AAssigning a data owner
- BImplementing technical control over the assets
- CImplementing a data loss prevention (DLP) solution
- DScheduling periodic audits
How the community answered
(25 responses)- A76% (19)
- B4% (1)
- C8% (2)
- D12% (3)
Why each option
Assigning a data owner would best facilitate the implementation of data classification requirements, as the data owner is responsible for determining the classification and ensuring its proper handling.
Assigning a data owner is crucial because the data owner is the individual ultimately accountable for the accuracy, integrity, and security of specific data assets. This role involves defining the appropriate classification for the data based on its business value and sensitivity, which then drives all subsequent security control implementations and handling procedures, thus directly enabling classification requirements.
Implementing technical controls is a method for enforcing data classification after it has been determined, but it doesn't facilitate the initial process of defining the classification itself.
Implementing a DLP solution is a technical control for enforcing classification rules and preventing unauthorized disclosure, but it doesn't establish the initial classification requirements.
Scheduling periodic audits is a monitoring activity to check compliance with data classification, not a foundational step for its initial implementation.
Concept tested: Data classification roles and responsibilities
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-60v1r1.pdf
Topics
Community Discussion
No community discussion yet for this question.