Which of the following should be done FIRST when defining responsibilities for ownership of information and systems?

Which of the following should be done FIRST when defining responsibilities for ownership of information and systems?
A . Require an information risk assessment.
B . Identify systems that are outsourced.
C . Ensure information is classified.
D . Require an inventory of information assets.

View Answer

Answer: D