QuestionQ248

Governance of Enterprise IT

An IT governance committee wants to ensure that the enterprise data policy clearly defines the role of data owner. Which of the following would BEST define the owner of data stored in an external cloud?

  • A The contract manager who monitors the security of the cloud provider
  • B The vendor who submits the data to the organization via online forms
  • C The business leader who is most impacted by the loss of data
  • D The risk manager who is responsible for protecting data stored in the cloud
Explanation

The data owner is the business user or leader who understands the business impact of losing the data and is accountable for decisions such as data requirements, classification, retention, and appropriate protection. Cloud-provider oversight and technical safeguards may be delegated, but ownership remains with the affected business function. ISACA: Data Owners' Responsibilities When Migrating to the Cloud

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!