Which of the following is the PRIMARY responsibility of a data owner?

The correct answer is A. Classifying information. The data owner's primary responsibility is classifying information. The data owner is typically a business leader or subject matter expert who understands the sensitivity, value, and regulatory requirements associated with a particular dataset. They determine what classification

Submitted by eva_at· Apr 18, 2026Information Security Governance

Question

Options

AClassifying information
BDetermining the data retention schedule
CAdministering user access
DSecuring information

How the community answered

(36 responses)

A
94% (34)
B
3% (1)
D
3% (1)

Explanation

The data owner's primary responsibility is classifying information. The data owner is typically a business leader or subject matter expert who understands the sensitivity, value, and regulatory requirements associated with a particular dataset. They determine what classification label (e.g., confidential, public, restricted) applies, which then drives all downstream security controls and handling requirements. Determining retention schedules (B) is often a shared responsibility with legal and compliance. Administering user access (C) is the role of the data custodian or IT administrator. Securing information (D) is also a custodian-level function. Classification is the foundational decision that only the data owner is positioned to make, as it requires business context, not just technical knowledge.

Topics

#Data Owner#Information Classification#Roles and Responsibilities#Information Governance

Community Discussion

No community discussion yet for this question.

Full CISM Practice