Which of the following are the responsibilities of the owner with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.

The correct answer is A. Determining what level of classification the information requires. B. Delegating the responsibility of the data protection duties to a custodian. C. Reviewing the classification assignments at regular time intervals and making changes as the. The data owner (typically a business manager or executive) has three core responsibilities: (A) Determining the appropriate classification level for the data based on its sensitivity and value; (B) Delegating day-to-day data protection duties - such as implementing controls - to

Security Leadership and Management

Question

Options

ADetermining what level of classification the information requires.
BDelegating the responsibility of the data protection duties to a custodian.
CReviewing the classification assignments at regular time intervals and making changes as the
DRunning regular backups and routinely testing the validity of the backup data.

How the community answered

(37 responses)

A
86% (32)
D
14% (5)

Explanation

The data owner (typically a business manager or executive) has three core responsibilities: (A) Determining the appropriate classification level for the data based on its sensitivity and value; (B) Delegating day-to-day data protection duties - such as implementing controls - to a data custodian (usually IT); and (C) Periodically reviewing and updating classification assignments as business needs and data sensitivity change over time. Option D - running backups and testing their validity - is the responsibility of the data custodian (IT/operations), not the owner. The owner defines policy and classification; the custodian implements and maintains the technical safeguards.

Topics

#Data Owner Responsibilities#Information Classification#Data Roles

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSMP Practice