Distinguishing between quantitative and qualitative data and applying controls for confidential and PII describes which concept?

Get ready for the GARP Risk and AI Exam with flashcards and multiple choice questions. Each question comes with hints and explanations. Prepare for success!

The concept being tested is data classification. This involves labeling data based on its type and its sensitivity so that appropriate handling and access controls can be applied. Distinguishing between quantitative data (numerical values) and qualitative data (descriptive or categorical information) helps determine how the data should be managed, stored, and protected. Applying controls for confidential data and personal identifiable information (PII) is a core part of classification because once data are categorized by sensitivity, specific protections—such as access restrictions, encryption, and retention rules—are implemented accordingly.

Data provenance focuses on the origin and lifecycle of data, data strategy is a broad plan for how an organization governs and uses data, and metadata management deals with the data about data (cataloging, lineage, and attributes). While these areas relate to data governance, they do not center on classifying data by type and sensitivity to determine protection levels in the way data classification does.