Differentiate between the responsibilities of the data owner and those of the data custodian. Complete the following sentence: The data owner is the:
The data owner is ultimately accountable for the security and appropriate protection of an information asset. The data custodian carries out the owner’s requirements by applying and enforcing the specified policies, controls, and restrictions. NIST defines an information owner as the official responsible for establishing controls for specified information.
Community Discussion