CISA Certified Information Systems Auditor – Question2024

Which of the following is the FIRST step in initiating a data classification program?

A. Risk appetite assessment
B. Inventory of data assets
C. Assignment of data ownership
D. Assignment of sensitivity levels

Correct Answer: C

Explanation:

Explanation:
The data classification process starts with the process of establishing ownership of data. This process also helps to prepare data dictionary