CGEIT · Question #61
Which of the following roles has PRIMARY accountability for the security related to data assets?
The correct answer is B. Data owner. The Data Owner has primary accountability for the security and protection of specific data assets.
Question
Which of the following roles has PRIMARY accountability for the security related to data assets?
Options
- ADatabase administrator
- BData owner
- CData analyst
- DSecurity architect
How the community answered
(23 responses)- A4% (1)
- B87% (20)
- C9% (2)
Why each option
The Data Owner has primary accountability for the security and protection of specific data assets.
A database administrator is responsible for implementing technical controls and managing the database system, but not the ultimate accountability for the data's security and policy definition.
The data owner, often a business manager, is responsible for the overall classification, protection, and usage policies for the data they own, making them primarily accountable for its security and governance.
A data analyst works with data, interpreting it, but does not typically hold primary accountability for its security or governance.
A security architect designs security frameworks and controls, but the data owner retains the ultimate accountability for the specific data assets and their protection.
Concept tested: Data Owner Responsibilities
Source: https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final
Topics
Community Discussion
No community discussion yet for this question.