CISM · Question #240
Data classification is PRIMARILY the responsibility of:
The correct answer is C. the data owner. The data owner is the individual or business unit accountable for a data set, including determining its value, sensitivity, and appropriate classification level. Data owners understand the business context of the data and are best positioned to assign the correct…
Question
Data classification is PRIMARILY the responsibility of:
Options
- Asenior management.
- Bthe data custodian.
- Cthe data owner.
- Dthe security manager.
How the community answered
(39 responses)- A3% (1)
- B5% (2)
- C92% (36)
Explanation
The data owner is the individual or business unit accountable for a data set, including determining its value, sensitivity, and appropriate classification level. Data owners understand the business context of the data and are best positioned to assign the correct classification. The data custodian (B) is responsible for the technical management and safeguarding of data per the owner's instructions, not for classification decisions. Senior management (A) sets policy and oversight but delegates classification responsibility. The security manager (D) enforces controls based on classification but does not assign it.
Topics
Community Discussion
No community discussion yet for this question.