Establishing permission to use company data in analytic activities should take place during which CRISP-DM phase?

• A. Data Preparation
• B. Business Understanding
• C. Deployment
• D. Modeling

Answer: (B)

Establishing who can use company data and under what rules belongs to the initial planning and scoping of the project. In CRISP-DM, that falls under the phase where you define business objectives, constraints, and requirements—including data access, privacy, security, and compliance. Locking in permissions early ensures the analytics work stays within approved boundaries and aligns with organizational policies before you start collecting, cleaning, or modeling data.

Data Preparation, Modeling, and Deployment come after these governance decisions and assume the data usage is already authorized.