CISM · Question #163
Which of the following is a PRIMARY responsibility of a data owner?
The correct answer is B. Data classification. A primary responsibility of a data owner is data classification, as they possess the necessary understanding of the data's business value and sensitivity.
Question
Which of the following is a PRIMARY responsibility of a data owner?
Options
- AData backup
- BData classification
- CData quality
- DData storage
How the community answered
(30 responses)- B90% (27)
- C3% (1)
- D7% (2)
Why each option
A primary responsibility of a data owner is data classification, as they possess the necessary understanding of the data's business value and sensitivity.
Data backup is typically a responsibility of data custodians or IT operations, who implement and maintain the technical data protection measures.
Data owners are responsible for determining the criticality, sensitivity, and value of the data they manage, making data classification their primary responsibility. This classification dictates the appropriate security controls, handling procedures, and access requirements for the information throughout its lifecycle.
Data quality is an important aspect of data management, often shared across various roles, but it is not the primary security responsibility that defines a data owner.
Data storage is typically a responsibility of data custodians or IT infrastructure teams who manage the physical or virtual storage systems.
Concept tested: Data owner responsibilities
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-18r1.pdf
Topics
Community Discussion
No community discussion yet for this question.