CSSLP · Question #320
Which of the following is NOT a responsibility of a data owner?
The correct answer is D. Maintaining and protecting data. A data owner's primary role is oversight and accountability for data, not the day-to-day operational tasks of maintaining and protecting it.
Question
Which of the following is NOT a responsibility of a data owner?
Options
- AApproving access requests
- BEnsuring that the necessary security controls are in place
- CDelegating responsibility of the day-to-day maintenance of the data protection mechanisms to the
- DMaintaining and protecting data
How the community answered
(19 responses)- B5% (1)
- C5% (1)
- D89% (17)
Why each option
A data owner's primary role is oversight and accountability for data, not the day-to-day operational tasks of maintaining and protecting it.
Approving access requests is a key responsibility of a data owner, as they determine who can access their data.
Ensuring that necessary security controls are in place is an accountability of the data owner, often achieved through policy and oversight.
Delegating the day-to-day maintenance of data protection mechanisms to a data custodian is a proper responsibility of a data owner.
Data owners are responsible for the overall security and classification of data, including approving access and ensuring controls are in place. However, the hands-on, day-to-day technical tasks of maintaining and protecting data, such as backups or access control implementation, are typically delegated to data custodians.
Concept tested: Data owner responsibilities
Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/data-governance-roles
Topics
Community Discussion
No community discussion yet for this question.