CISSP: Certified Information Systems Security Professional

Question

The Chief Information Officer (CIO) has decided that, as part of the organization’s business-modernization efforts, it will move toward a cloud architecture. Within the next two years, all business-critical data will be migrated to either internal or external cloud services.

To ensure that data is properly protected during and after the cloud migration, personnel in which role does the CIO have a PRIMARY obligation to work with?

Explanation

An information owner has the operational authority and responsibility to establish controls for specified information throughout its life cycle, including its classification, processing, dissemination, and disposal. That responsibility persists when data is moved to internal or external cloud services, so the information owner must define and validate the required protection for the migrated data.

Learn more

CISSP: Certified Information Systems Security Professional

AstroTutor

Notes

Readiness

QuestionQ211

Community Discussion