Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Other options are management’s responsibilties
The other options appear to be management, not auditor's, responsibility.
My initial reaction was B but the wording focuses on the "information classification process" which to me seems like the process of classifying information, not protecting it. Protection seems like it would fall in a separate process. I battled Claude AI on this and it agreed my argument was valid but it ultimately went with B.