CompTIA Security+ Exam Prep

Answer: D - When setting up classification systems, indicating procedures for declassifying the data, defining classification levels, and documenting any exceptions to the previous classification issues are all steps. There are ten steps to creating the classification system:

1) Define classification levels

2) Specify the criteria that will determine how data are classified

3) Have the data owner indicate the classification of the data they are responsible for

4) Identify the data custodian who will be responsible for maintaining data and security level

5) Indicate the security controls or protection mechanisms required for maintaining data and its security level

6) Document any exceptions to the previous classification issues

7) Indicate the methods that can be used to transfer custody of the information to a different data owner

8) Indicate procedures for declassifying the data

10) Integrate these issues into the security-awareness program so all employees understand how to handle data at different classification levels