Exam CRISC topic 1 question 1434 discussion

C. Information classification policy The Information classification policy is the most important document regarding the treatment of sensitive data. It provides guidelines on how to categorize data based on its sensitivity and outlines the handling, storage, and access controls required for each classification level. This ensures that sensitive data is properly protected according to its classification.

C. Information classification policy An information classification policy defines how data should be categorized based on its sensitivity and importance. It outlines the criteria for classifying data into different levels (e.g., public, internal, confidential) and establishes the appropriate handling, storage, and transmission practices for each classification.