An Entity in the system can belong to one or more of which categories?

An Entity in the system can belong to one or more of which categories?

• A. Entity Types
• B. Information Objects
• C. Departments
• D. Entity Classes

Answer: (A)

Classification of an Entity is done using Entity Types, and an Entity can be assigned more than one type to reflect its different roles or contexts. This flexible tagging lets a single object function in multiple ways within the IRM model—for example, a system might be treated both as a technology asset and as a business process, requiring different risk lenses and controls. Information Objects are distinct data artifacts, not the categories used to classify an Entity. Departments refer to organizational units, not the classification scheme for an Entity. Entity Classes are a different grouping concept and don’t serve the multi-type classification role in this context.

Classification of an Entity is done using Entity Types, and an Entity can be assigned more than one type to reflect its different roles or contexts. This flexible tagging lets a single object function in multiple ways within the IRM model—for example, a system might be treated both as a technology asset and as a business process, requiring different risk lenses and controls.

Information Objects are distinct data artifacts, not the categories used to classify an Entity. Departments refer to organizational units, not the classification scheme for an Entity. Entity Classes are a different grouping concept and don’t serve the multi-type classification role in this context.