Greatest impact on information classification scheme development

Information Security Governance
Answer Correct answer: A — The classification scheme is primarily based on the value of the information to the organization.

Which of the following will have the GREATEST impact on the development of the information classification scheme consisting of various classification levels?

  1. Value of the information Correct Answer
  2. Data format
  3. Owners of the information
  4. Organizational structure

Community Votes

A
83%
C
17%

83% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

This question tests the fundamental driver of classification levels, distinguishing between the criteria for classification (value) and the process of assigning it (ownership).

The value of information is the primary factor determining the structure of an information classification scheme. Community consensus confirms that business value and criticality drive the need for distinct classification levels.

Selecting 'Owners of the information' is common because owners assign labels, but the scheme's levels are defined by the data's inherent value and sensitivity, not the individuals.

Community Discussion (3 comments)

koala_lay 👍 3 Selected: A
Agree to Answer A. Value of the information
oluchecpoint 👍 2 Selected: A
Option A - Value
yottabyte 👍 1 Selected: C
Question asks for THE DEVELOPMENT of the information classification scheme.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

The value of information, including its sensitivity and criticality to business operations, is the foundational element for defining classification levels. High-value assets require stricter controls, necessitating distinct levels within the scheme. Without assessing value, an organization cannot justify the cost of protection or differentiate between public and confidential data.

Why the Other Options Are Wrong

Data format (B) is irrelevant to the classification level, as sensitivity is independent of whether data is digital or physical. Owners (C) are responsible for applying the classification labels but do not define the scheme's structure. Organizational structure (D) influences reporting lines but does not determine the sensitivity or required protection levels of the data.

Community Comment Notes

The community strongly supports Option A (83 votes), emphasizing that value dictates the protection requirements. Commenters clarify that while owners are involved in the process, the 'development of the scheme' relies on the objective worth of the information rather than the subjective owners.

Official Reference

Exam Strategy

Focus on the business driver—value or risk—rather than the administrative actor. Remember that the scheme defines levels based on what needs protecting, not who is protecting it.

Related Analysis

Practice All CISM Questions

Access 400 questions with complete answers and detailed explanations.

View Full CISM Practice Test →

← Back to CISM Study Guide