CSSLP · Question #354
Which of the following are the responsibilities of a custodian with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.
The correct answer is A. Performing data restoration from the backups when necessary B. Running regular backups and routinely testing the validity of the backup data D. Controlling access, adding and removing privileges for individual users. A data custodian's responsibilities in an information classification program include the technical management and operational protection of data, such as backup, restoration, and access control implementation.
Question
Which of the following are the responsibilities of a custodian with regard to data in an information classification program? Each correct answer represents a complete solution. Choose three.
Options
- APerforming data restoration from the backups when necessary
- BRunning regular backups and routinely testing the validity of the backup data
- CDetermining what level of classification the information requires
- DControlling access, adding and removing privileges for individual users
How the community answered
(41 responses)- A90% (37)
- C10% (4)
Why each option
A data custodian's responsibilities in an information classification program include the technical management and operational protection of data, such as backup, restoration, and access control implementation.
Data custodians are responsible for the operational tasks of data management, which includes ensuring data availability by performing restorations from backups when required.
Running regular backups and routinely testing the validity of the backup data are key responsibilities of a data custodian to ensure data recoverability and integrity.
Determining the classification level of information is typically the responsibility of the data owner, not the custodian, as it requires understanding the business value and impact of the data.
Custodians manage the technical implementation of access controls, granting and revoking privileges for individual users as directed by data owners or business requirements.
Concept tested: Data custodian responsibilities
Source: https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-18r1.pdf
Topics
Community Discussion
No community discussion yet for this question.