Isaca CISM Question Answer
The PRIMARY reason to properly classify information assets is to determine:
appropriate encryption strength using a risk-based approach.
the business impact if assets are compromised.
the appropriate protection based on sensitivity.
user access levels based on the need to know.
TESTED 25 Feb 2026
Copyright © 2014-2026 ACE4Sure. All Rights Reserved