Greatest impact on information classification scheme development

CISM By islever Editorial Last updated

Short answer

A The classification scheme is primarily based on the value of the information to the organization.

Question

Which of the following will have the GREATEST impact on the development of the information classification scheme consisting of various classification levels?
  1. Value of the information Correct Answer
  2. Data format
  3. Owners of the information
  4. Organizational structure

Key Takeaways

This question tests the fundamental driver of classification levels, distinguishing between the criteria for classification (value) and the process of assigning it (ownership).

The value of information is the primary factor determining the structure of an information classification scheme. Community consensus confirms that business value and criticality drive the need for distinct classification levels.

Common mistake: Selecting 'Owners of the information' is common because owners assign labels, but the scheme's levels are defined by the data's inherent value and sensitivity, not the individuals.

Expert Analysis

Why the Answer Is Correct

The value of information, including its sensitivity and criticality to business operations, is the foundational element for defining classification levels. High-value assets require stricter controls, necessitating distinct levels within the scheme. Without assessing value, an organization cannot justify the cost of protection or differentiate between public and confidential data.

Why the Other Options Are Wrong

Data format (B) is irrelevant to the classification level, as sensitivity is independent of whether data is digital or physical. Owners (C) are responsible for applying the classification labels but do not define the scheme's structure. Organizational structure (D) influences reporting lines but does not determine the sensitivity or required protection levels of the data.

Community Comment Notes

The community strongly supports Option A (83 votes), emphasizing that value dictates the protection requirements. Commenters clarify that while owners are involved in the process, the 'development of the scheme' relies on the objective worth of the information rather than the subjective owners.

Official Reference

ISACA CISM Review Manual

This link opens the official vendor documentation in a new tab.

Exam Strategy

Focus on the business driver—value or risk—rather than the administrative actor. Remember that the scheme defines levels based on what needs protecting, not who is protecting it.

Community Votes

A
83%
C
17%

83% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. koala_lay 👍 3 Answered A
    Agree to Answer A. Value of the information
  2. yottabyte 👍 1 Answered C
    Question asks for THE DEVELOPMENT of the information classification scheme.
  3. oluchecpoint 👍 2 Answered A
    Option A - Value

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Best Defense Against DDoS Attacks in Enterprise Networks?

S-grade

When Should a Business Continuity Plan Be Primarily Triggered?

S-grade

Which Approach Best Communicates Security to Senior Management?

S-grade

How to Keep a Business Continuity Plan Current?

S-grade

Practice All CISM Questions

Access 400 questions with complete answers and detailed explanations.

View Full CISM Practice Test →

← Back to CISM Study Guide