Which term corresponds to providing the proper data classification for the information security professionals?

Which term corresponds to providing the proper data classification for the information security professionals?

• A. Standard
• B. Stakeholders
• C. System-specific Policies
• D. Technical Control

Answer: (B)

Determining who sets and communicates the proper data classifications is about the role of stakeholders. They are the data owners with business or regulatory accountability, so they define the classification scheme, labels, and handling requirements that must be followed. Information security professionals rely on that guidance to implement the appropriate protections, assign labels, and enforce access controls consistent with those classifications. A standard would be the actual framework for classification, not the actor who provides it. System-specific policies describe rules for particular systems, and technical controls are the safeguards themselves, not the party responsible for classification guidance.

Determining who sets and communicates the proper data classifications is about the role of stakeholders. They are the data owners with business or regulatory accountability, so they define the classification scheme, labels, and handling requirements that must be followed. Information security professionals rely on that guidance to implement the appropriate protections, assign labels, and enforce access controls consistent with those classifications. A standard would be the actual framework for classification, not the actor who provides it. System-specific policies describe rules for particular systems, and technical controls are the safeguards themselves, not the party responsible for classification guidance.