CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1700

Governance

Which of the following is the PRIMARY responsibility of a data custodian within the risk management process?

  • A Ensuring data is protected according to the classification
  • B Being accountable for control design
  • C Reporting and escalating data breaches to senior management
  • D Performing periodic data reviews according to policy
Explanation

A data custodian is responsible for safeguarding data in accordance with its assigned classification and the organization’s handling requirements. Data owners typically retain accountability for the data and related control decisions.

Community Discussion

No comments yet. Be the first to start the discussion!