Isaca Exam CRISC Topic 11 Question 58 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 58
Topic #: 11

[All CRISC Questions]

Which of the following should be done FIRST when developing a data protection management plan?

APerform a cost-benefit analysis.

BIdentify critical data.

CEstablish a data inventory.

DConduct a risk analysis.

Show Suggested Answer

Suggested Answer: D

by Regenia at Feb 07, 2023, 06:10 PM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Luz

29 days ago

Wait, we're supposed to have a plan? I thought we just threw some duct tape on the servers and called it a day. Where's the fun in that?

upvoted 0 times

...

Jennie

1 months ago

Risk analysis? I thought we were supposed to be protecting the data, not analyzing it to death! Let's just lock it all up and call it a day.

upvoted 0 times

Ernie

9 days ago

It's important to have a plan in place to protect the data effectively.

upvoted 0 times

...

Paul

11 days ago

Once we know the risks, we can prioritize our protection efforts.

upvoted 0 times

...

Rodrigo

16 days ago

Locking up the data without knowing the risks could leave us vulnerable.

upvoted 0 times

...

Carmela

17 days ago

We need to start with a risk analysis to understand what we're up against.

upvoted 0 times

...

Claudia

1 months ago

Identify critical data? Isn't that what the janitor is for? I'm just here to make the big decisions, you know?

upvoted 0 times

Bettye

9 days ago

The janitor has nothing to do with data protection management. It's a task for the IT department.

upvoted 0 times

...

Elfriede

13 days ago

No, identifying critical data is important for protecting sensitive information.

upvoted 0 times

...

Leandro

1 months ago

Cost-benefit analysis? Pfft, I'd rather just dive right in and start protecting everything. What could go wrong?

upvoted 0 times

...

James

2 months ago

Establish a data inventory? That's a no-brainer! How am I supposed to protect data if I don't even know what I have?

upvoted 0 times

Kati

4 days ago

After that, you can implement appropriate security measures to protect the data based on its importance and sensitivity.

upvoted 0 times

...

Frederica

5 days ago

Once you have a clear understanding of what data you have, you can then prioritize and assess the risks associated with each type of data.

upvoted 0 times

...

Ezekiel

17 days ago

Yes, establishing a data inventory is crucial. It's the foundation of any data protection plan.

upvoted 0 times

...

Izetta

2 months ago

I believe conducting a risk analysis should come first to prioritize potential threats.

upvoted 0 times

...

Elli

2 months ago

I agree with Alex, identifying critical data is crucial for data protection.

upvoted 0 times

...

Alex

2 months ago

I think the first step should be to establish a data inventory.

upvoted 0 times

...