nerdexam
(ISC)2

CGRC · Question #415

James work as an IT systems personnel in SoftTech Inc. He performs the following tasks: - Runs regular backups and routine tests of the validity of the backup data. - Performs data restoration from…

The correct answer is C. Custodian. James's tasks of performing backups, data restorations, and maintaining records in line with classification policies are characteristic responsibilities of an IT custodian.

Implementation of Security and Privacy Controls

Question

James work as an IT systems personnel in SoftTech Inc. He performs the following tasks:

  • Runs regular backups and routine tests of the validity of the backup data.
  • Performs data restoration from the backups whenever required.
  • Maintains the retained records in accordance with the established information classification

policy. What is the role played by James in the organization? Response:

Options

  • AManager
  • BOwner
  • CCustodian
  • DUser

How the community answered

(43 responses)
  • A
    16% (7)
  • B
    5% (2)
  • C
    70% (30)
  • D
    9% (4)

Why each option

James's tasks of performing backups, data restorations, and maintaining records in line with classification policies are characteristic responsibilities of an IT custodian.

AManager

A Manager typically oversees teams and projects, but these specific hands-on tasks relate more to the custodian role.

BOwner

A Data Owner is accountable for the data, defines its classification and protection requirements, but does not typically perform the operational tasks like backups.

CCustodianCorrect

A data custodian, often an IT professional, is responsible for the technical implementation and maintenance of security controls, including performing backups, managing data storage, ensuring data integrity through restoration tests, and adhering to information classification policies set by the data owner. They ensure the data is protected and available as required.

DUser

A User is an individual who accesses and utilizes the information, but does not perform the system-level maintenance and protection tasks described.

Concept tested: Information security roles and responsibilities

Source: https://csrc.nist.gov/glossary/term/information-owner

Topics

#Information Security Roles#Data Custodian#Backup and Recovery#Information Classification Policy

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CGRC Practice