Which of the following should be done FIRST when defining responsibilities for ownership of information and systems?

exams CGEIT CGEIT exam 0 Comments

Which of the following should be done FIRST when defining responsibilities for ownership of information and systems?
A . Require an information risk assessment.
B . Identify systems that are outsourced.
C . Ensure information is classified.
D . Require an inventory of information assets.

Answer: D