nerdexam
(ISC)2

CAP · Question #60

Which of the following are the tasks performed by the owner in the information classification schemes? Each correct answer represents a part of the solution. Choose three.

The correct answer is A. To make original determination to decide what level of classification the information requires, C. To review the classification assignments from time to time and make alterations as the D. To delegate the responsibility of the data safeguard duties to the custodian. In information security, the data/information owner (typically a senior manager or business unit leader) has three core responsibilities: (A) Making the original determination of what classification level the information requires - the owner decides sensitivity and…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following are the tasks performed by the owner in the information classification schemes? Each correct answer represents a part of the solution. Choose three.

Options

  • ATo make original determination to decide what level of classification the information requires,
  • BTo perform data restoration from the backups whenever required.
  • CTo review the classification assignments from time to time and make alterations as the
  • DTo delegate the responsibility of the data safeguard duties to the custodian.

How the community answered

(57 responses)
  • A
    89% (51)
  • B
    11% (6)

Explanation

In information security, the data/information owner (typically a senior manager or business unit leader) has three core responsibilities: (A) Making the original determination of what classification level the information requires - the owner decides sensitivity and classification; (C) Periodically reviewing classification assignments and updating them as business needs or sensitivity levels change; (D) Delegating the day-to-day data protection and safeguarding duties to the custodian (typically IT staff). Option B - performing data restoration from backups - is a custodian responsibility, not an owner task. The custodian handles the technical, operational aspects of data protection including backups and recovery.

Topics

#Information Classification#Data Owner Roles#Security Governance#Roles and Responsibilities

Community Discussion

No community discussion yet for this question.

Full CAP Practice