nerdexam
IIA

IIA-CFSA · Question #136

Some organizations have information protection policies that place the burden of information protection on managers in individual organizational units. An information protection policy may include:

The correct answer is D. Both A & B. See the full explanation below for the reasoning.

Question

Some organizations have information protection policies that place the burden of information protection on managers in individual organizational units. An information protection policy may include:

Options

  • AStatements that define information as an asset that must be protected to different degrees based
  • BStatements outlining the responsibilities of information owners, custodians and users
  • CDefinitions of the previously audited data and its classifications
  • DBoth A & B

How the community answered

(39 responses)
  • A
    8% (3)
  • B
    13% (5)
  • C
    3% (1)
  • D
    77% (30)

Community Discussion

No community discussion yet for this question.

Full IIA-CFSA Practice