CISSP-ISSMP · Question #17
Which of the following are the common roles with regard to data in an information classification program? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is B. Custodian C. Owner D. Security auditor. In a formal information classification program, three standard roles are recognized: the Data Owner (C) is accountable for classifying data and authorizing access; the Data Custodian (B) is responsible for the day-to-day maintenance, storage, and protection of the data on…
Question
Which of the following are the common roles with regard to data in an information classification program? Each correct answer represents a complete solution. Choose all that apply.
Options
- AEditor
- BCustodian
- COwner
- DSecurity auditor
- EUser
How the community answered
(68 responses)- A3% (2)
- B94% (64)
- E3% (2)
Explanation
In a formal information classification program, three standard roles are recognized: the Data Owner (C) is accountable for classifying data and authorizing access; the Data Custodian (B) is responsible for the day-to-day maintenance, storage, and protection of the data on behalf of the owner; and the Security Auditor (D) independently reviews and validates that security controls and policies are being followed. 'Editor' (A) is not a standard classification role. 'User' (E) is a role that exists in practice but is not typically listed as one of the formal classification program roles in most frameworks tested on these exams.
Topics
Community Discussion
No community discussion yet for this question.