CAS-002 · Question #93
During a specific incident response and recovery process action, the response team determines that it must first speak to the person ultimately responsible for the data. With whom should the…
The correct answer is B. Data Owner. The Data Owner is the individual ultimately accountable for a data asset and must be consulted first in incident response decisions affecting that data.
Question
During a specific incident response and recovery process action, the response team determines that it must first speak to the person ultimately responsible for the data. With whom should the response team speak FIRST?
Options
- AData User
- BData Owner
- CBusiness Owner
- DData Custodian
How the community answered
(34 responses)- B91% (31)
- C3% (1)
- D6% (2)
Why each option
The Data Owner is the individual ultimately accountable for a data asset and must be consulted first in incident response decisions affecting that data.
The Data User is an individual who accesses and uses the data for business purposes but has no decision-making authority or ultimate accountability for the data.
The Data Owner is the senior individual or executive who holds formal accountability for the classification, handling, and protection of a specific data set. During incident response, the Data Owner has the authority to make decisions about data access, disclosure, and recovery actions, making them the primary contact before any other role.
The Business Owner is responsible for a business process or unit and may overlap with the Data Owner role in some frameworks, but 'Data Owner' is the specific role with direct accountability for the data itself.
The Data Custodian is responsible for the technical handling and storage of data on behalf of the Data Owner but does not hold ultimate accountability or authority over the data.
Concept tested: Data ownership roles in incident response
Source: https://csrc.nist.gov/publications/detail/sp/800-18/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.