Classification of confidential information is the responsibility of whom,according to COBIT5?
A) external auditor
B) information owner
C) IT security professionals
D) management

Question

Quizplus · Accepted Answer

According to COBIT5, the responsibility for classification of confidential information lies with the information owner. This is because they are the individuals or groups that have the most knowledge about the information and the potential risks associated with its disclosure or exploitation. IT security professionals and management may have a role in implementing the classification system, but ultimately it is the information owner who determines the sensitivity and value of the information. External auditors may review the effectiveness of the classification system, but they are not responsible for establishing it.

Classification of Confidential Information Is the Responsibility of Whom,according to COBIT5