Exam CISA All QuestionsBrowse all questions from this exam
Go to Exam
Question 89

Which of the following should be the FIRST step when developing a data loss prevention (DLP) solution for a large organization?

    Correct Answer: C

    The first step when developing a data loss prevention (DLP) solution for a large organization is to conduct a data inventory and classification exercise. This step involves identifying the types, locations, formats, and repositories of data that need to be protected, as well as categorizing the data based on its sensitivity and regulatory requirements. This foundational step is crucial because it allows the organization to understand what data exists, where it resides, and its level of sensitivity, which in turn informs the development of effective DLP policies and controls.

Discussion
Adams159753Option: C

I think answer is C

TTH1019Option: C

Before implementing a DLP solution, it is crucial to understand the organization's data landscape. Conducting a data inventory and classification exercise helps identify the types of data that need to be protected and their sensitivity levels. This step involves identifying the locations, formats, and repositories where data resides, as well as categorizing the data based on its sensitivity and regulatory requirements. This exercise forms the foundation for developing effective DLP policies and controls.

MichaelHoangOption: C

how can you create DLP policy without knowing which data needs to be applying with which protection? And how do you know which protection needs to be applied without knowing the classification of data? Hence, Data classification must be the first step. The answer is C

Lapin_perduOption: C

answer is C

5b56aaeOption: C

1st step about inventory

SwallowsOption: C

Identifying sensitive data and important information is the basis for developing DLP policies and conducting threat analysis. Clarifying what data needs to be protected will help you design subsequent policies and procedures.

RS66Option: C

classification

echo_certOption: C

C - You can't do anything without an inventory and classification of assets

blues_leeOption: C

C. Conduct a data inventory and classification exercise.

meelaanOption: A

1st step would be policy. which will guide the implementation

swmasindeOption: C

First, understand the needs of the business by identifying and prioritizing risks such as the data risk appetite. Then identify the data the business needs to protect, including intellectual property (IP), and verify the data and application owners.

ooramiOption: C

Answer is C