With which of the following departments should an engineer for a consulting firm coordinate when determining the control and reporting requirements for storage of sensitive, proprietary customer…

The correct answer is C. Sales. Sensitive and proprietary customer information, all these data seem to be owned by sales. So, if they own it, they will be responsible for controls. From CASP’s official book: Data ownership implies that the owner is ultimately responsible for that data. Those responsibilities…

Risk Management

Question

With which of the following departments should an engineer for a consulting firm coordinate when determining the control and reporting requirements for storage of sensitive, proprietary customer information?

Options

AHuman resources
BFinancial
CSales
DLegal counsel

How the community answered

(32 responses)

A
3% (1)
C
94% (30)
D
3% (1)

Explanation

Sensitive and proprietary customer information, all these data seem to be owned by sales. So, if they own it, they will be responsible for controls. From CASP’s official book: Data ownership implies that the owner is ultimately responsible for that data. Those responsibilities may include labeling the data (e.g., determining who should have access to the data), ensuring the data is subject to the appropriate security controls (e.g., backup processes), and selecting custodians who will carry out these actions.

Topics

#data governance#sensitive data controls#compliance reporting#stakeholder coordination

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice