CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ244

Secure Software Concepts

Which of the following is not a responsibility of a data owner?

  • A Approving access requests
  • B Ensuring that the necessary security controls are in place
  • C Delegating responsibility of the day-to-day maintenance of the data protection mechanisms to the data custodian
  • D Maintaining and protecting data
Explanation

A data owner is accountable for authorizing access and ensuring suitable security controls, while a data custodian carries out the operational maintenance and protection of data.

Community Discussion

No comments yet. Be the first to start the discussion!