CSSLP · Question #379
For a cloud application deployed by Meridian Financial who is typically regarded as the owner of the application data?
The correct answer is D. The organization or business unit that relies on the application. For a cloud application, the organization or business unit that uses and relies on the application is typically regarded as the owner of the application data.
Question
For a cloud application deployed by Meridian Financial who is typically regarded as the owner of the application data?
Options
- AThe software development team
- BThe IT operations or platform team
- CThe Chief Data Officer or an appointed data steward
- DThe organization or business unit that relies on the application
How the community answered
(53 responses)- A8% (4)
- B4% (2)
- C2% (1)
- D87% (46)
Why each option
For a cloud application, the organization or business unit that uses and relies on the application is typically regarded as the owner of the application data.
The software development team creates the application but does not typically own the business data processed by it.
The IT operations or platform team manages the infrastructure and deployment, but they are custodians of the data, not its ultimate owners.
The Chief Data Officer or data steward is responsible for governing data and defining policies but acts on behalf of the organization that ultimately owns the data.
Even when an application is deployed in the cloud and managed by various teams, the ultimate responsibility and ownership of the data resides with the entity that created or collected that data for its business purposes. The organization or the specific business unit that leverages the application owns the data because it is vital to their operations and typically subject to their compliance and governance policies.
Concept tested: Data ownership in cloud applications
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility
Topics
Community Discussion
No community discussion yet for this question.