Which of the following statements best describes the difference between the role of a data owner and the role of a data custodian?

The correct answer is B. The datacustodian implements the information classification scheme after the initial. The correct answer is B: the data custodian implements the information classification scheme after the initial assignment by the data owner. The Data Owner is a senior manager or business executive who has final responsibility for data - they make the initial classification…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

AThe custodian implements the information classification scheme after the initial assignment by
BThe datacustodian implements the information classification scheme after the initial
CThe data owner implements the information classification scheme after the initial assignment
DThe custodian makes the initialinformation classification assignments, and the operations

How the community answered

(37 responses)

B
92% (34)
C
3% (1)
D
5% (2)

Explanation

The correct answer is B: the data custodian implements the information classification scheme after the initial assignment by the data owner. The Data Owner is a senior manager or business executive who has final responsibility for data - they make the initial classification decisions (e.g., confidential, public, sensitive). The Data Custodian (typically IT operations or a database administrator) is then responsible for implementing and maintaining the controls that reflect those classifications, such as backups, access controls, and storage. This division separates policy authority (owner) from operational responsibility (custodian).

Topics

#Data Owner#Data Custodian#Information Classification#Roles and Responsibilities

Community Discussion

No community discussion yet for this question.

Full CAP Practice