Câu 523: CISA: Certified Information Systems Auditor

An organization is developing data classification standards and has asked internal audit for advice on aligning the standards with best practices. Internal audit would MOST likely recommend the standards should be:

1. A. based on the business requirements for confidentiality of the information.
2. B. aligned with the organization's segregation of duties requirements.
3. C. based on the results of an organization-wide risk assessment. — đáp án hiện tại
4. D. based on the business requirements for authentication of the information.