MENU
Which of the following should be the PRIMARY basis for establishing categories within an information classification scheme?
Suggested Answer: D
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
BR
Brice
11 months ago
Really? I’m surprised people aren’t leaning more towards C.
ST
Stephanie
12 months ago
Wait, how is D not the top choice? Business impact is crucial!
IS
Isabella
12 months ago
B is a solid choice, industry standards guide a lot of practices.
GL
Glendora
12 months ago
A is important too, but security should come first!
PO
Polly
1 year ago
I think it should definitely be C, information security policy is key.
MU
Muriel
1 year ago
I lean towards business impact as well, especially since it aligns with risk management principles we covered.
KR
Kristel
1 year ago
I practiced a similar question where the focus was on information architecture, but I don't know if that's the best answer here.
FR
France
1 year ago
I remember we discussed information security policy in class, but I feel like industry standards could also play a big role.
TE
Terry
1 year ago
I think the primary basis should be business impact, but I'm not entirely sure if that's the right choice.
RE
Reta
1 year ago
Hmm, I'm a bit unsure about this one. I'm not sure if I should go with option A or option D. I'll need to think it through a bit more.
DE
Derick
1 year ago
I've got a good feeling about this one. The key is to identify the option that doesn't fit with the purpose of qualitative risk analysis and the types of organizational process assets that would be relevant.
RI
Rima
1 year ago
Okay, I've got a strategy here. The question is asking about proper compliance, so I need to focus on the requirements of the BCRs. I'm pretty sure option B is the right answer, but I'll double-check the details just to be sure.