Exam CISM topic 1 question 240 discussion

Data needs to be classified to know what type of security it will have in the cloud. Data needs to be classified to know what backup tier it needs to be stored in. Data needs to be classified to know if it is going to be isolated. In short it's (B) data classification is the root of all these steps.

Security of the data is the first consideration, i.e. Isolation

B - Important to know what data can go to the cloud and if they can even go to the cloud at all

B. Data classification. Data classification involves categorizing data based on its sensitivity, importance, and regulatory requirements. This step is crucial because it helps determine how data should be handled, stored, and protected within the cloud environment. It sets the foundation for making decisions about data access controls, encryption, retention policies, and other security measures.

B. Classification is the first consideration as the data stored may be sensitive/confidential. So you determine first what data is being stored in the cloud

Before moving production data to the cloud, it is crucial to evaluate and understand the data isolation mechanisms provided by the cloud service provider. This includes assessing the provider's security controls, network segmentation, encryption methods, access controls, and overall architecture. The organization must ensure that the cloud environment can provide the necessary level of isolation to protect the confidentiality, integrity, and availability of the production data.

B. Data classification

B is correct

at first, should consider for transit of data.