nerdexam
(ISC)2

CSSLP · Question #307

Which of the following are the tasks performed by the owner in the information classification schemes? Each correct answer represents a part of the solution. Choose three.

The correct answer is A. To make original determination to decide what level of classification the information requires, which is B. To review the classification assignments from time to time and make alterations as the business requirements D. To delegate the responsibility of the data safeguard duties to the custodian.. Information owners are responsible for initially classifying data, periodically reviewing classifications, and delegating data safeguard duties to custodians.

Secure Software Concepts

Question

Which of the following are the tasks performed by the owner in the information classification schemes? Each correct answer represents a part of the solution. Choose three.

Options

  • ATo make original determination to decide what level of classification the information requires, which is
  • BTo review the classification assignments from time to time and make alterations as the business requirements
  • CTo perform data restoration from the backups whenever required.
  • DTo delegate the responsibility of the data safeguard duties to the custodian.

How the community answered

(63 responses)
  • A
    89% (56)
  • C
    11% (7)

Why each option

Information owners are responsible for initially classifying data, periodically reviewing classifications, and delegating data safeguard duties to custodians.

ATo make original determination to decide what level of classification the information requires, which isCorrect

The information owner is accountable for the data and is tasked with making the initial decision on its classification level based on its value and sensitivity.

BTo review the classification assignments from time to time and make alterations as the business requirementsCorrect

Business requirements and data sensitivity can change over time, so the information owner must regularly review and update classification assignments.

CTo perform data restoration from the backups whenever required.

Performing data restoration from backups is a task typically assigned to a data custodian or system administrator, not the information owner.

DTo delegate the responsibility of the data safeguard duties to the custodian.Correct

While the owner is accountable for the data, they delegate the day-to-day operational tasks of safeguarding the data to a data custodian.

Concept tested: Information owner responsibilities in data classification

Topics

#Information Classification#Data Owner Responsibilities#Security Roles#Data Governance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CSSLP Practice