Classification of confidential information is the responsibility of whom,according to COBIT5?
A)External auditor.
B)Information owner.
C)IT security professionals.
D)Management.

Question

Quizplus · Accepted Answer

According to COBIT5, classification of confidential information is the responsibility of the information owner, who has the authority to determine the level of confidentiality based on business needs and risk. IT security professionals and management may provide support and guidance, but ultimately it is the information owner who is accountable for ensuring the protection and control of confidential information. The external auditor’s role is to verify and assess the effectiveness of the organization’s information security control processes.

Classification of Confidential Information Is the Responsibility of Whom,according to COBIT5