CISM Certified Information Security Manager – Question0241

The PRIMARY benefit of performing an information asset classification is to:

A.
link security requirements to business objectives.
B. identify controls commensurate to risk.
C. define access rights.
D. establish ownership.

Correct Answer: B

Explanation:

Explanation: All choices are benefits of information classification. However, identifying controls that are proportional to the risk in all cases is the primary benefit of the process.