CISA Certified Information Systems Auditor – Question0411

Which of the following is the MOST important prerequisite for implementing a data loss prevention (DLP) tool?

A.
Identifying where existing data resides and establishing a data classification matrix.
B. Requiring users to save files in secured folders instead of a company-wide shared drive
C. Reviewing data transfer logs to determine historical patterns of data flow
D. Developing a DLP policy and requiring signed acknowledgement by users

Correct Answer: D