SSCP · Question #336
Whose role is it to assign classification level to information?
The correct answer is C. Owner. The Data/Information Owner is ultimately responsible for the protection of the data. It is the Data/Information Owner that decides upon the classifications of that data they are responsible for. The data owner decides upon the classification of the data he is responsible for…
Question
Whose role is it to assign classification level to information?
Options
- ASecurity Administrator
- BUser
- COwner
- DAuditor
How the community answered
(53 responses)- A2% (1)
- B2% (1)
- C92% (49)
- D4% (2)
Explanation
The Data/Information Owner is ultimately responsible for the protection of the data. It is the Data/Information Owner that decides upon the classifications of that data they are responsible for. The data owner decides upon the classification of the data he is responsible for and alters that classification if the business need arises. The following answers are incorrect: Security Administrator. Is incorrect because this individual is responsible for ensuring that the access right granted are correct and support the polices and directives that the Data/Information User. Is Incorrect because the user uses/access the data according to how the Data/Information Owner defined their access. Auditor. Is incorrect because the Auditor is responsible for ensuring that the access levels are appropriate. The Auditor would verify that the Owner classified the data properly.
Topics
Community Discussion
No community discussion yet for this question.