CCSP Question #166: Real Exam Question with Answer & Explanation

Question

What is a data custodian responsible for?

Options

• AThe safe custody, transport, storage of the data, and implementation of business rules
• BData content, context, and associated business rules
• CLogging and alerts for all data
• DCustomer access and alerts for all data

Explanation

A data custodian is responsible for the practical aspects of data management, ensuring its safe custody, proper storage, secure transport, and the technical implementation of access and business rules established by the data owner.

Common mistakes.

• B. Data content, context, and associated business rules are typically the responsibilities of the data owner or data steward, who define what the data is and how it should be used.
• C. While custodians implement controls that may generate logs and alerts, 'logging and alerts for all data' is too broad and doesn't encompass the full scope of a custodian's physical/technical management responsibilities.
• D. Customer access is an aspect of data usage, and while custodians implement access controls, defining who accesses data (especially customers) is typically a data owner's or data steward's responsibility, not the custodian's primary role.

Concept tested. Data role responsibilities (Custodian)

Reference. https://csrc.nist.gov/glossary/term/information_custodian

No community discussion yet for this question.