nerdexam
(ISC)2

CSSLP · Question #80

Which of the following statements best describes the difference between the role of a data owner and the role of a data custodian?

The correct answer is D. The data custodian implements the information classification scheme after the initial assignment. The data owner is responsible for classifying information and determining its protection requirements, while the data custodian is responsible for implementing and managing the technical controls to protect that information.

Secure Software Concepts

Question

Which of the following statements best describes the difference between the role of a data owner and the role of a data custodian?

Options

  • AThe custodian makes the initial information classification assignments, and the operations manager
  • BThe data owner implements the information classification scheme after the initial assignment by
  • CThe custodian implements the information classification scheme after the initial assignment by the
  • DThe data custodian implements the information classification scheme after the initial assignment

How the community answered

(19 responses)
  • A
    5% (1)
  • D
    95% (18)

Why each option

The data owner is responsible for classifying information and determining its protection requirements, while the data custodian is responsible for implementing and managing the technical controls to protect that information.

AThe custodian makes the initial information classification assignments, and the operations manager

This statement incorrectly assigns the responsibility for initial information classification to the data custodian, which is a key role of the data owner.

BThe data owner implements the information classification scheme after the initial assignment by

This statement is incomplete and does not fully or accurately describe the distinct responsibilities of both data owner and data custodian.

CThe custodian implements the information classification scheme after the initial assignment by the

This statement is incomplete and does not fully or accurately describe the distinct responsibilities of both data owner and data custodian.

DThe data custodian implements the information classification scheme after the initial assignmentCorrect

The data owner holds ultimate responsibility for the data, including its classification, value, and defining its protection requirements based on business needs and regulatory compliance. The data custodian, typically an IT professional, is then responsible for the operational tasks of implementing, managing, and maintaining the security controls and policies defined by the data owner.

Concept tested: Data owner vs. Data custodian roles

Topics

#Data owner#Data custodian#Information classification#Roles and responsibilities

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CSSLP Practice