nerdexam
(ISC)2

SSCP · Question #997

Which of the following is not a responsibility of an information (data) owner?

The correct answer is D. Running regular backups and periodically testing the validity of the backup data. This responsibility would be delegated to a data custodian rather than being performed directly by the information owner. "Determine what level of classification the information requires" is incorrect. This is one of the major responsibilities of an information owner…

Submitted by chiamaka_o· Apr 18, 2026Security Concepts and Practices

Question

Which of the following is not a responsibility of an information (data) owner?

Options

  • ADetermine what level of classification the information requires.
  • BPeriodically review the classification assignments against business needs.
  • CDelegate the responsibility of data protection to data custodians.
  • DRunning regular backups and periodically testing the validity of the backup data.

How the community answered

(66 responses)
  • A
    8% (5)
  • B
    5% (3)
  • C
    2% (1)
  • D
    86% (57)

Explanation

This responsibility would be delegated to a data custodian rather than being performed directly by the information owner. "Determine what level of classification the information requires" is incorrect. This is one of the major responsibilities of an information owner. "Periodically review the classification assignments against business needs" is incorrect. This is one of the major responsibilities of an information owner. "Delegates responsibility of maintenance of the data protection mechanisms to the data custodian" is incorrect. This is a responsibility of the information owner.

Topics

#Data owner responsibilities#Data custodian#Roles and responsibilities#Data classification

Community Discussion

No community discussion yet for this question.

Full SSCP Practice