An IT administrator needs to ensure data retention standards are implemented on an enterprise application. Which of the following describes the administrator's role?

Question

Options

• AProcessor
• BCustodian
• CPrivacy officer
• DOwner

• A
  5% (2)
• B
  91% (40)
• C
  2% (1)
• D
  2% (1)

Explanation

Custodian (B) is correct because a custodian is responsible for the day-to-day management and safeguarding of data, which includes implementing policies like data retention - they maintain and protect data on behalf of the owner.

• A (Processor) is wrong because a processor simply handles or processes data as instructed, often a third party (e.g., a cloud vendor); they don't set or enforce retention standards.
• C (Privacy officer) is wrong because a privacy officer creates and oversees privacy policy, they don't directly implement technical controls in systems.
• D (Owner) is wrong because the owner (typically a business manager or executive) defines what the retention requirements should be, but doesn't implement them hands-on.

Memory tip: Think of it like a library - the Owner decides the rules for the collection, the Custodian (librarian) actually shelves, maintains, and enforces those rules day-to-day, and the Privacy Officer writes the library's privacy policy. The IT admin is always the custodian.

No community discussion yet for this question.