CISA Certified Information Systems Auditor – Question0824

Which of the following is MOST critical to include when developing a data loss prevention (DLP) policy?

A.
Identification of the relevant network channels requiring protection
B. Identification of the users, groups and roles to whom the policy will apply
C. Identification of enforcement actions
D. Identification of the content to protect

Correct Answer: D