nerdexam
Isaca

CRISC · Question #58

Which of the following would BEST facilitate the implementation of data classification requirements?

The correct answer is A. Assigning a data owner. Assigning a data owner would best facilitate the implementation of data classification requirements, as the data owner is responsible for determining the classification and ensuring its proper handling.

Submitted by femi9· Apr 18, 2026Governance

Question

Which of the following would BEST facilitate the implementation of data classification requirements?

Options

  • AAssigning a data owner
  • BImplementing technical control over the assets
  • CImplementing a data loss prevention (DLP) solution
  • DScheduling periodic audits

How the community answered

(25 responses)
  • A
    76% (19)
  • B
    4% (1)
  • C
    8% (2)
  • D
    12% (3)

Why each option

Assigning a data owner would best facilitate the implementation of data classification requirements, as the data owner is responsible for determining the classification and ensuring its proper handling.

AAssigning a data ownerCorrect

Assigning a data owner is crucial because the data owner is the individual ultimately accountable for the accuracy, integrity, and security of specific data assets. This role involves defining the appropriate classification for the data based on its business value and sensitivity, which then drives all subsequent security control implementations and handling procedures, thus directly enabling classification requirements.

BImplementing technical control over the assets

Implementing technical controls is a method for enforcing data classification after it has been determined, but it doesn't facilitate the initial process of defining the classification itself.

CImplementing a data loss prevention (DLP) solution

Implementing a DLP solution is a technical control for enforcing classification rules and preventing unauthorized disclosure, but it doesn't establish the initial classification requirements.

DScheduling periodic audits

Scheduling periodic audits is a monitoring activity to check compliance with data classification, not a foundational step for its initial implementation.

Concept tested: Data classification roles and responsibilities

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-60v1r1.pdf

Topics

#Data Classification#Data Ownership#Information Governance#Roles and Responsibilities

Community Discussion

No community discussion yet for this question.

Full CRISC Practice