CISM Certified Information Security Manager – Question0431

Which of the following is the MOST effective method for categorizing system and data criticality during the risk assessment process?

A.
Interview senior management.
B. Interview data custodians.
C. Interview members of the board.
D. Interview the asset owners.

Correct Answer: D