CISM Certified Information Security Manager – Question1284

A third-party service provider has proposed a data loss prevention (DLP) solution. Which of the following MUST be in place for this solution to be relevant to the organization?

A.
Senior management support
B. A data classification schema
C. An adequate data testing environment
D. A business case

Correct Answer: D