Certified Information Systems Security Professional – CISSP – Question221

Which of the following is the MOST important goal of information asset valuation?

A.
Developing a consistent and uniform method of controlling access on information assets
B. Developing appropriate access control policies and guidelines
C. Assigning a financial value to an organization’s information assets
D. Determining the appropriate level of protection

Correct Answer: D