nerdexam
(ISC)2

CGRC · Question #654

Which of the following are the tasks performed by the owner in the information classification schemes? Each correct answer represents a part of the solution. Choose three. Response:

The correct answer is A. To make original determination to decide what level of classification the information requires, C. To review the classification assignments from time to time and make alterations as the business D. To delegate the responsibility of the data safeguard duties to the custodian. The information owner's tasks in classification schemes include initial determination of classification level, periodic review and adjustment, and delegating safeguard duties.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following are the tasks performed by the owner in the information classification schemes? Each correct answer represents a part of the solution. Choose three. Response:

Options

  • ATo make original determination to decide what level of classification the information requires,
  • BTo perform data restoration from the backups whenever required.
  • CTo review the classification assignments from time to time and make alterations as the business
  • DTo delegate the responsibility of the data safeguard duties to the custodian.

How the community answered

(23 responses)
  • A
    91% (21)
  • B
    9% (2)

Why each option

The information owner's tasks in classification schemes include initial determination of classification level, periodic review and adjustment, and delegating safeguard duties.

ATo make original determination to decide what level of classification the information requires,Correct

The information owner is ultimately responsible for making the original determination of the classification level required for their information based on its sensitivity and impact.

BTo perform data restoration from the backups whenever required.

Performing data restoration from backups is a technical task typically carried out by data custodians or IT operations personnel, not the information owner.

CTo review the classification assignments from time to time and make alterations as the businessCorrect

Information owners must periodically review the assigned classification levels to ensure they remain appropriate as business needs or data context changes.

DTo delegate the responsibility of the data safeguard duties to the custodian.Correct

While the owner is accountable for data protection, they delegate the operational and technical duties of safeguarding the data to designated custodians.

Concept tested: Information owner roles in data classification

Source: https://csrc.nist.gov/publications/detail/sp/800-60/vol-1/rev-1/final

Topics

#Information Classification#Data Owner Responsibilities#Roles and Responsibilities#Information Governance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CGRC Practice