When building a data classification scheme, which of the following is the PRIMARY concern?

5 thoughts on “When building a data classification scheme, which of the following is the PRIMARY concern?”

1. I think the purpose of classification ultimately is still to protect data. If data is classified wrongly hence the confidentiality, availability and integrity of the data will not be sufficiently protected. No matter how efficient the method is, it should be correct. So D – the authenticity of the classification is the most important

   Reply

2. I am going with B. Business processes or applications are tiered. Many smaller non essential applications would not be in the DR plan.

   Reply

3. After reading the section on Data Classification in CISSP Official Study Guide, 7th Edition, I think D – Authenticity is incorrect. Here is the excerpt:

   “Data classification, or categorization, is the primary means by which data is protected based on its need for secrecy, sensitivity, or confidentiality. It is inefficient to treat all data the same way when designing and implementing a security system because some data items need more security than others. Securing everything at a low security level means sensitive data is easily accessible. Securing everything at a high security level is too expensive and restricts access to unclassified, noncritical data. Data classification is used to determine how much effort, money, and resources are allocated to protect the data and control access to it. Data classification, or categorization, is the process of organizing items, objects, subjects, and so on into groups, categories, or collections with similarities. These similarities could include value, cost, sensitivity, risk, vulnerability, power, privilege, possible levels of loss or damage, or need to know.”

   I now believe the correct answer is B – Cost effectiveness.

   12

   1

   Reply

4. Changed my mind. D is the most correct

   Reply

5. Not sure if D is correct.

   Reply