Regarding information classification, which statement is correct?

Regarding information classification, which statement is correct?

• A. Both Jo and Chris are correct
• B. Only Jo is correct
• C. Only Chris is correct
• D. Neither is correct

Answer: (A)

Information classification is about assigning a sensitivity level to information and enforcing protections that match that level. When both statements reflect this approach—one pointing to labeling information with a classification, and the other to applying access and handling rules that match that classification—their ideas work together and are both correct. The process starts by evaluating the potential impact on confidentiality, integrity, and availability, then labeling the data accordingly and defining how it should be stored, transmitted, accessed, and disposed. You then implement controls that align with that label and reassess classifications over time as needs or regulations change. Because both views support protecting information in a way that fits its sensitivity, concluding that both are correct is the most consistent answer.

Information classification is about assigning a sensitivity level to information and enforcing protections that match that level. When both statements reflect this approach—one pointing to labeling information with a classification, and the other to applying access and handling rules that match that classification—their ideas work together and are both correct. The process starts by evaluating the potential impact on confidentiality, integrity, and availability, then labeling the data accordingly and defining how it should be stored, transmitted, accessed, and disposed. You then implement controls that align with that label and reassess classifications over time as needs or regulations change. Because both views support protecting information in a way that fits its sensitivity, concluding that both are correct is the most consistent answer.