I use Collection as data may "travel" throughout an organisation, Take for example: Data related to the weight of a specific product, while in the production area, that data, may be classified as Internal, however if the Financial department now requires that piece of data as part of their reporting, the classification could change to be "confidential" as it may be combined with other data. It may not change, but the receiving department is now the Data Owner and needs to classify it.
As to (ISC)2 being the expert, I tend to disagree. Most materials, the organisation puts together are done by volunteers. Exams as an example are developed by a group of knowledgeable individuals. The questions and distractors are discussed and a consensus is reached. This is why most exams include pre-test items (let's see how they perform) and if they make it to the exam, the questions again are reviewed based on candidate comments and the stats related to the item. Additionally, some topics are very difficult to put into question format. If you ever have the good fortune to participate in developing exams (a great experience that helps expand your knowledge base and also a great networking opportunity), you may find yourself in a position, that you can write a question and develop three distractors but not be able to find the fourth (not always the easiest job).
If I based my work on everything that I see or read, I potentially might not have my job very long. At times, we need to rely on experience but during an exam, we need to rely on what we have seen in a book or a video. As an example, we recently saw that here on the forum, where a question on Cloud Security was brought into question and we were told, that "training" is now under review for rewrite.
Again, MHO
d
