nerdexam
Isaca

CISM · Question #163

Which of the following is a PRIMARY responsibility of a data owner?

The correct answer is B. Data classification. A primary responsibility of a data owner is data classification, as they possess the necessary understanding of the data's business value and sensitivity.

Submitted by sofia.br· Apr 18, 2026Information Security Governance

Question

Which of the following is a PRIMARY responsibility of a data owner?

Options

  • AData backup
  • BData classification
  • CData quality
  • DData storage

How the community answered

(30 responses)
  • B
    90% (27)
  • C
    3% (1)
  • D
    7% (2)

Why each option

A primary responsibility of a data owner is data classification, as they possess the necessary understanding of the data's business value and sensitivity.

AData backup

Data backup is typically a responsibility of data custodians or IT operations, who implement and maintain the technical data protection measures.

BData classificationCorrect

Data owners are responsible for determining the criticality, sensitivity, and value of the data they manage, making data classification their primary responsibility. This classification dictates the appropriate security controls, handling procedures, and access requirements for the information throughout its lifecycle.

CData quality

Data quality is an important aspect of data management, often shared across various roles, but it is not the primary security responsibility that defines a data owner.

DData storage

Data storage is typically a responsibility of data custodians or IT infrastructure teams who manage the physical or virtual storage systems.

Concept tested: Data owner responsibilities

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-18r1.pdf

Topics

#Data Owner#Data Classification#Information Security Roles#Accountability

Community Discussion

No community discussion yet for this question.

Full CISM Practice