CSSLP Question #379: Real Exam Question with Answer & Explanation

The correct answer is D: The organization or business unit that relies on the application. For a cloud application, the organization or business unit that uses and relies on the application is typically regarded as the owner of the application data.

Secure Software Deployment, Operations, Maintenance

Question

For a cloud application deployed by Meridian Financial who is typically regarded as the owner of the application data?

Options

AThe software development team
BThe IT operations or platform team
CThe Chief Data Officer or an appointed data steward
DThe organization or business unit that relies on the application

Explanation

For a cloud application, the organization or business unit that uses and relies on the application is typically regarded as the owner of the application data.

Common mistakes.

A. The software development team creates the application but does not typically own the business data processed by it.
B. The IT operations or platform team manages the infrastructure and deployment, but they are custodians of the data, not its ultimate owners.
C. The Chief Data Officer or data steward is responsible for governing data and defining policies but acts on behalf of the organization that ultimately owns the data.

Concept tested. Data ownership in cloud applications

Reference. https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility

Topics

#Data Ownership#Cloud Data Governance#Organizational Responsibility#Data Stewardship

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice Browse All CSSLP Questions