CompTIA Project+ (PK0-005)Basics of IT and GovernanceMedium
A project is implementing a new enterprise content management (ECM) system that will store various types of company documents, including legal contracts, HR records, and marketing materials. The project manager needs to classify these documents to ensure appropriate security controls and retention policies are applied. Which security consideration is being addressed by this classification effort?
- AIncident Response
- BInformation Classification
- CVulnerability Management
- DRisk Assessment
Show answer & explanationAnswer & explanation
Correct answer: B. Information Classification
Information classification is the process of categorizing data based on its sensitivity, value, and criticality to the organization. This allows for the application of appropriate security controls and retention policies.
Why the other options are wrong
- A. Incident response deals with the actions taken after a security breach or incident has occurred.
- C. Vulnerability management focuses on identifying, assessing, and remediating security weaknesses in systems.
- D. Risk assessment identifies and evaluates potential threats and vulnerabilities to an organization's assets.
Information Classification
The process of categorizing data based on its sensitivity, value, and criticality to an organization, to determine appropriate security controls and handling requirements.
- Helps apply appropriate security measures.
- Influences data retention and access policies.
- Typically involves categories like Public, Internal, Confidential, Secret.
Memory trick: Secure your data by knowing its worth, its weaknesses, and how to react.