CRISC · Question #585
Which of the following would BEST facilitate the implementation of data classification requirements?
The correct answer is A. Assigning a data owner. Assigning a data owner is the most effective way to facilitate the implementation of data classification requirements.
Question
Which of the following would BEST facilitate the implementation of data classification requirements?
Options
- AAssigning a data owner
- BScheduling periodic audits
- CImplementing technical controls over the assets
- DImplementing a data loss prevention (DLP) solution
How the community answered
(55 responses)- A73% (40)
- B16% (9)
- C4% (2)
- D7% (4)
Why each option
Assigning a data owner is the most effective way to facilitate the implementation of data classification requirements.
Assigning a data owner is fundamental because the data owner is the individual accountable for the data's protection, including determining its classification level based on sensitivity, value, and regulatory requirements. Without a clear owner, enforcing classification requirements and associated policies becomes challenging and inconsistent.
Scheduling periodic audits helps verify compliance but does not facilitate the initial implementation of the classification requirements themselves.
Implementing technical controls comes *after* data classification, as controls are based on the classification level, so it doesn't facilitate the classification itself.
Implementing a DLP solution is a technical control for enforcing data classification and preventing data loss, but it requires the data to be classified first, making it a subsequent step, not the facilitator of the classification itself.
Concept tested: Data ownership and classification
Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/data-classification-overview
Topics
Community Discussion
No community discussion yet for this question.