Isaca CRISC Exam - Topic 11 Question 58 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 58
Topic #: 11

[All CRISC Questions]

Which of the following should be done FIRST when developing a data protection management plan?

APerform a cost-benefit analysis.

BIdentify critical data.

CEstablish a data inventory.

DConduct a risk analysis.

Show Suggested Answer

Suggested Answer: D

by Regenia at Feb 07, 2023, 06:10 PM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Clement

8 months ago

Totally agree with identifying critical data first!

upvoted 0 times

...

Mira

8 months ago

Wait, why would you do a cost-benefit analysis before knowing what data you have?

upvoted 0 times

...

Craig

9 months ago

Establishing a data inventory is definitely the first step.

upvoted 0 times

...

Germaine

9 months ago

I think a risk analysis should come first.

upvoted 0 times

...

Rickie

9 months ago

Identifying critical data is key!

upvoted 0 times

...

Ming

9 months ago

I’m leaning towards performing a cost-benefit analysis first, but I remember it being more of a later step in the process.

upvoted 0 times

...

Davida

9 months ago

I feel like conducting a risk analysis is important, but I can't recall if it should be done before or after identifying critical data.

upvoted 0 times

...

Kristel

9 months ago

I remember practicing a question like this, and I think establishing a data inventory might be the right answer.

upvoted 0 times

...

Gaynell

9 months ago

I think identifying critical data should come first, but I'm not entirely sure if it’s the very first step.

upvoted 0 times

...

Arthur

9 months ago

This looks like a tricky BGP routing question. I'll need to carefully analyze the network topology and configuration details to determine the expected output on R1.

upvoted 0 times

...

Kelvin

9 months ago

Hmm, I'm a bit unsure about this one. The lack of an estate tax exemption amount is throwing me off. I'll need to think through the logic step-by-step.

upvoted 0 times

...

Aretha

9 months ago

The Daubert standard sounds familiar, but I'm not 100% confident that's the right answer. I'll have to think this through carefully.

upvoted 0 times

...

Jovita

10 months ago

Hmm, I'm a bit confused by the different adjustments here. I'll need to carefully work through each one to make sure I understand how they impact the final balance.

upvoted 0 times

...

Luz

1 year ago

Wait, we're supposed to have a plan? I thought we just threw some duct tape on the servers and called it a day. Where's the fun in that?

upvoted 0 times

...

Jennie

1 year ago

Risk analysis? I thought we were supposed to be protecting the data, not analyzing it to death! Let's just lock it all up and call it a day.

upvoted 0 times

Ernie

1 year ago

It's important to have a plan in place to protect the data effectively.

upvoted 0 times

...

Paul

1 year ago

Once we know the risks, we can prioritize our protection efforts.

upvoted 0 times

...

Rodrigo

1 year ago

Locking up the data without knowing the risks could leave us vulnerable.

upvoted 0 times

...

Carmela

1 year ago

We need to start with a risk analysis to understand what we're up against.

upvoted 0 times

...

Claudia

1 year ago

Identify critical data? Isn't that what the janitor is for? I'm just here to make the big decisions, you know?

upvoted 0 times

Ty

1 year ago

As a decision-maker, you should understand the importance of prioritizing data protection to avoid security breaches.

upvoted 0 times

...

Bettye

1 year ago

The janitor has nothing to do with data protection management. It's a task for the IT department.

upvoted 0 times

...

Elfriede

1 year ago

No, identifying critical data is important for protecting sensitive information.

upvoted 0 times

...

Leandro

1 year ago

Cost-benefit analysis? Pfft, I'd rather just dive right in and start protecting everything. What could go wrong?

upvoted 0 times

...

James

1 year ago

Establish a data inventory? That's a no-brainer! How am I supposed to protect data if I don't even know what I have?

upvoted 0 times

Kati

1 year ago

After that, you can implement appropriate security measures to protect the data based on its importance and sensitivity.

upvoted 0 times

...

Frederica

1 year ago

Once you have a clear understanding of what data you have, you can then prioritize and assess the risks associated with each type of data.

upvoted 0 times

...

Ezekiel

1 year ago

Yes, establishing a data inventory is crucial. It's the foundation of any data protection plan.

upvoted 0 times

...

Izetta

1 year ago

I believe conducting a risk analysis should come first to prioritize potential threats.

upvoted 0 times

...

Elli

1 year ago

I agree with Alex, identifying critical data is crucial for data protection.

upvoted 0 times

...

Alex

1 year ago

I think the first step should be to establish a data inventory.

upvoted 0 times

...