CISA Certified Information Systems Auditor – Question2089

A third-party service provider has proposed a data loss prevention (DLP) solution. Which of the following MUST be in place for this solution to be relevant to the organization?

A.
An adequate data testing environment
B. Senior management support
C. A business case
D. A data classification

Correct Answer: C