Which of the following should be established FIRST so that data owners can consistently assess the level of data protection needed across the enterprise?

exams CGEIT CGEIT exam 0 Comments

Which of the following should be established FIRST so that data owners can consistently assess the level of data protection needed across the enterprise?
A . Data encryption program
B . Data risk management program
C . Data retention policy
D . Data classification policy

Answer: D