IIA
IIA-CFSA · Question #136
Some organizations have information protection policies that place the burden of information protection on managers in individual organizational units. An information protection policy may include:
The correct answer is D. Both A & B. See the full explanation below for the reasoning.
Question
Some organizations have information protection policies that place the burden of information protection on managers in individual organizational units. An information protection policy may include:
Options
- AStatements that define information as an asset that must be protected to different degrees based
- BStatements outlining the responsibilities of information owners, custodians and users
- CDefinitions of the previously audited data and its classifications
- DBoth A & B
How the community answered
(39 responses)- A8% (3)
- B13% (5)
- C3% (1)
- D77% (30)
Community Discussion
No community discussion yet for this question.