SK0-003 · Question #26
Which of the following is the MOST important step in creating a system classification list?
The correct answer is D. Interviewing system owners. Creating a system classification list requires understanding the business impact and importance of each system. The most important step involves gathering insights directly from those who depend on the system.
Question
Which of the following is the MOST important step in creating a system classification list?
Options
- AVerifying the OS manufacturers
- BLocating a hosting facility
- CConsulting with the system manufacturers
- DInterviewing system owners
How the community answered
(28 responses)- A4% (1)
- B4% (1)
- C11% (3)
- D82% (23)
Why each option
Creating a system classification list requires understanding the business impact and importance of each system. The most important step involves gathering insights directly from those who depend on the system.
Verifying OS manufacturers is a technical detail for inventory, not a primary step in determining a system's business criticality.
Locating a hosting facility is a logistical or operational decision that follows classification, rather than being part of the classification process itself.
Consulting with system manufacturers provides technical specifications but does not provide information about the system's business criticality or impact, which is essential for classification.
Interviewing system owners is the most crucial step because system owners (e.g., business unit leaders) possess direct knowledge of the system's function, data sensitivity, and the financial or operational impact of its unavailability or compromise, which are the primary drivers for classification.
Concept tested: System classification process-steps and stakeholders
Source: https://csrc.nist.gov/pubs/sp/800/171/r2/upd1/final/nist-sp800-171r2-upd1-final.pdf
Topics
Community Discussion
No community discussion yet for this question.