GCFA · Question #138
Which of the following are the benefits of information classification for an organization? Each correct answer represents a complete solution. Choose two.
The correct answer is B. It helps identify which information is the most sensitive or vital to an organization. D. It helps identify which protections apply to which information. Information classification benefits an organization by identifying the sensitivity of data and mapping that sensitivity to appropriate protective controls.
Question
Which of the following are the benefits of information classification for an organization? Each correct answer represents a complete solution. Choose two.
Options
- AIt ensures that modifications are not made to data by unauthorized personnel or processes.
- BIt helps identify which information is the most sensitive or vital to an organization.
- CIt helps reduce the Total Cost of Ownership (TCO).
- DIt helps identify which protections apply to which information.
How the community answered
(47 responses)- A4% (2)
- B81% (38)
- C15% (7)
Why each option
Information classification benefits an organization by identifying the sensitivity of data and mapping that sensitivity to appropriate protective controls.
Preventing unauthorized modifications to data describes the integrity principle of the CIA triad, which is a separate security objective not uniquely achieved through information classification.
Identifying which information is most sensitive or vital allows an organization to prioritize security resources and apply controls proportional to the value and risk associated with each data asset.
Reducing Total Cost of Ownership is a business efficiency goal not directly tied to information classification, which primarily addresses risk management and data governance.
Classification directly maps data categories to required protections, ensuring that controls such as encryption, access restrictions, and handling procedures are consistently applied to the correct information sets.
Concept tested: Benefits of information classification in security
Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.199.pdf
Topics
Community Discussion
No community discussion yet for this question.