Data classification influences which aspects of security implementation?

• A. Encryption algorithms chosen
• B. Retention schedule
• C. Physical location
• D. The controls selected and enforced based on classification

Answer: (D)

Data classification dictates how sensitive and critical the data is, which in turn determines what protections are required. The protection choices—who can access the data, how it is stored and transmitted, how it is monitored, and how it is recovered or disposed—are all tailored to the data’s classification. For highly sensitive information, you would enforce stringent controls such as strong access restrictions, multifactor authentication, encryption in transit and at rest with solid key management, comprehensive logging, and strict handling procedures. Less sensitive data would warrant fewer or lighter controls. While retention policies, deployment location, and even encryption choices can be influenced by classification, the central security implementation decision driven by classification is the set of controls that are selected and enforced based on that classification.