CISA Question 200

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  First assign owner then others

• Chose C1

  While it's also important to ensure that the information owner is involved in approving access to assets (option A), this aspect is more related to access control processes and may vary depending on organizational policies and procedures. However, having clear security criteria documented for each classification is foundational to effectively implementing access controls and ensuring that information is adequately protected throughout its lifecycle.

• 3

  C. the security criteria are clearly documented for each classification.