Exam CISM topic 1 question 800 discussion

This is chatgpt justification, While prioritization of risk treatment (Option C) is indeed an outcome of classification, an accurate and complete information asset catalog (Option A) serves as the initial and most reliable indicator that assets are classified properly. This is why Option A is generally considered the best indicator of asset classification accuracy.

I go for C. Having a comprehensive asset register does not necessarily mean that assets are classified correctly. Instead, being able to prioritize risk treatment based on the asset criticality is a better indication of correct classification (e.g., critical assets first).

For the first time, after 799 questions, I'm gonna rely on AI (Google Bard) to answer this question because I just can't wrap my head around it for whatever reason. So according to Bard: "While all the options contribute to good information security practices, only one most directly indicates accurate information asset classification: A. An accurate and complete information asset catalog: This catalog serves as the foundation for classification. It details all information assets, their locations, formats, and potential risks. Without a comprehensive understanding of all assets, accurate classification is impossible. The other options rely on the quality of the catalog for their effectiveness."

C. Appropriate prioritization of information risk treatment

A. An accurate and complete information asset catalog

A. An accurate and complete information asset catalog is the best indication that information assets are classified accurately. An information asset catalog is a comprehensive inventory of an organization's information assets, which includes details such as their location, classification, sensitivity, and ownership. It serves as a central repository of information about all the assets an organization possesses and helps to ensure that assets are properly identified, classified, and managed.

I like C for this one. I don't see how answer A indicates the assets are classified accurately. Having a complete asset catalog is accurate but it doesn't mean assets are classified correctly. I prefer C. appropriate prioritization of risk treatment better indicates accurate classification of assets. My two cents.

A. An accurate and complete information asset catalog BEST indicates that information assets are classified accurately. This is because having a comprehensive and accurate catalog of information assets helps in identifying the criticality and value of each asset, which is necessary for determining the level of protection they require. Proper classification and cataloging also helps ensure that appropriate controls are in place to protect sensitive information and meet regulatory requirements.