Of the following, which option is a prerequisite action to understand the organization's protect surface clearly?

Of the following, which option is a prerequisite action to understand the organization’s protect surface clearly?

Of the following, which option is a prerequisite action to understand the organization’s protect surface clearly?
A . Data and asset classification
B . Threat intelligence capability and monitoring
C . Gap analysis of the organization’s threat landscape
D . To have the latest risk register for controls implementation

Answer: A

Explanation:

Data and asset classification is a prerequisite action to understand the organization’s protect surface clearly because it helps to identify the most critical and sensitive data and assets that need to be protected by Zero Trust principles. Data and asset classification also helps to define the appropriate policies and controls for different levels of data and asset sensitivity.

Reference = Certificate of Competence in Zero Trust (CCZT) – Cloud Security Alliance, Zero Trust Training (ZTT) – Module 2: Data and Asset Classification