QuestionQ28
Security PrinciplesDifferentiate between the responsibilities of the data owner and those of the data custodian. Complete the following sentence: The data owner is the:
- A department in the organization responsible for the data's physical storage location. The data custodian is anyone who has access the data for any reason.
- B person or entity who accesses/and or manipulates data or information, in the course of assigned duties. The data custodian is a person or process with the appropriate level of privilege to access the data.
- C person or entity ultimately responsible for the security of an information asset. The data custodian is the person or entity responsible for imposing and enforcing policies and restrictions, dictated by the data owner.
- D person or process that originally creates the information. The data custodian is a role that shifts to any person or process currently accessing the data, and passes to the next person or process to access the data.
- E person or entity responsible for imposing and enforcing policies and restrictions, dictated by the functional user. The data custodian is a person or process who accesses and/or manipulates the information.
Community Discussion