Câu 155: CISA: Certified Information Systems Auditor

While auditing a small organization's data classification processes and procedures, an IS auditor noticed that data is often classified at the incorrect level. What is the MOST effective way for the organization to improve this situation?

1. A. Conduct awareness presentations and seminars for information classification policies. — đáp án hiện tại
2. B. Use automatic document classification based on content.
3. C. Have IT security staff conduct targeted training for data owners.
4. D. Publish the data classification policy on the corporate web portal.