nerdexam
Isaca

CRISC · Question #585

Which of the following would BEST facilitate the implementation of data classification requirements?

The correct answer is A. Assigning a data owner. Assigning a data owner is the most effective way to facilitate the implementation of data classification requirements.

Submitted by lucia.co· Apr 18, 2026Governance

Question

Which of the following would BEST facilitate the implementation of data classification requirements?

Options

  • AAssigning a data owner
  • BScheduling periodic audits
  • CImplementing technical controls over the assets
  • DImplementing a data loss prevention (DLP) solution

How the community answered

(55 responses)
  • A
    73% (40)
  • B
    16% (9)
  • C
    4% (2)
  • D
    7% (4)

Why each option

Assigning a data owner is the most effective way to facilitate the implementation of data classification requirements.

AAssigning a data ownerCorrect

Assigning a data owner is fundamental because the data owner is the individual accountable for the data's protection, including determining its classification level based on sensitivity, value, and regulatory requirements. Without a clear owner, enforcing classification requirements and associated policies becomes challenging and inconsistent.

BScheduling periodic audits

Scheduling periodic audits helps verify compliance but does not facilitate the initial implementation of the classification requirements themselves.

CImplementing technical controls over the assets

Implementing technical controls comes *after* data classification, as controls are based on the classification level, so it doesn't facilitate the classification itself.

DImplementing a data loss prevention (DLP) solution

Implementing a DLP solution is a technical control for enforcing data classification and preventing data loss, but it requires the data to be classified first, making it a subsequent step, not the facilitator of the classification itself.

Concept tested: Data ownership and classification

Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/data-classification-overview

Topics

#Data Classification#Data Ownership#Information Governance#Roles and Responsibilities

Community Discussion

No community discussion yet for this question.

Full CRISC Practice