When reviewing a data classification scheme, it is MOST important for an IS auditor to determine if:

December 16, 2021 by Admin

When reviewing a data classification scheme, it is MOST important for an IS auditor to determine if:

  • each information asset is assigned to a different classification.
  • senior IT managers are identified as information owners.
  • the security criteria are clearly documented for each classification.
  • the information owner is required to approve access to the asset.

Leave a Reply