In the CRIME framework, what does the 'I' stand for?

In the CRIME framework, what does the 'I' stand for?

• A. Information and Communications
• B. Integrity
• C. Internal Auditing
• D. Independent Assessment

Answer: (A)

The I in CRIME corresponds to Information and Communications. This area focuses on how information is created, stored, shared, and protected, as well as how communications channels are secured and managed. It covers practices for information governance, data handling, encryption, access controls, and the reliability of information in transit and at rest. That scope—information management and secure communications—is why this option is the best fit for the I designation. The other terms describe different ideas: Integrity is about ensuring data accuracy and trustworthiness, Internal Auditing is an internal check function, and Independent Assessment is an external evaluation. While related, none of these alone captures the full Information and Communications domain that the I stands for in CRIME.

The I in CRIME corresponds to Information and Communications. This area focuses on how information is created, stored, shared, and protected, as well as how communications channels are secured and managed. It covers practices for information governance, data handling, encryption, access controls, and the reliability of information in transit and at rest. That scope—information management and secure communications—is why this option is the best fit for the I designation.

The other terms describe different ideas: Integrity is about ensuring data accuracy and trustworthiness, Internal Auditing is an internal check function, and Independent Assessment is an external evaluation. While related, none of these alone captures the full Information and Communications domain that the I stands for in CRIME.