nerdexam
(ISC)2

CCSP · Question #856

A data custodian is responsible for which of the following?

The correct answer is C. The safe custody, transport, storage of the data, and implementation of business rules. The data custodian role is distinct from the data owner. The data owner determines what data is collected, its purpose, and who may access it (policy). The data custodian is the technical steward responsible for the safe custody, transport, and storage of data, and for…

Submitted by femi9· Apr 18, 2026Cloud Data Security

Question

A data custodian is responsible for which of the following?

Options

  • AData context
  • BData content
  • CThe safe custody, transport, storage of the data, and implementation of business rules
  • DLogging access and alerts

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    95% (36)

Explanation

The data custodian role is distinct from the data owner. The data owner determines what data is collected, its purpose, and who may access it (policy). The data custodian is the technical steward responsible for the safe custody, transport, and storage of data, and for implementing the business rules and access controls defined by the owner. Option A (data context) and B (data content) are owner-level responsibilities. Option D (logging access and alerts) is a narrow technical task that may be performed by a custodian but does not define the role-option C is the complete, authoritative definition.

Topics

#Data custodian#Data roles and responsibilities#Data security roles#Data governance

Community Discussion

No community discussion yet for this question.

Full CCSP Practice