Which of the following are the responsibilities of a custodian with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.

Question

Options

• ADetermining what level of classification the information requires
• BRunning regular backups and routinely testing the validity of the backup data
• CControlling access, adding and removing privileges for individual users
• DPerforming data restoration from the backups when necessary

• A
  6% (1)
• B
  94% (15)

Explanation

In an information classification program, a custodian (typically an IT administrator) is responsible for the operational tasks of protecting data: (B) Running regular backups and testing their validity ensures data availability and recovery capability. (C) Controlling access and managing user privileges implements the access controls defined by the data owner. (D) Performing data restoration from backups ensures business continuity after data loss events. Option A - determining the classification level - is the responsibility of the data owner, not the custodian. The data owner defines policy and classification; the custodian implements and maintains those controls.

No community discussion yet for this question.