QuestionQ50Verified/Secure Software ConceptsCopy linkReport a problemAsk AstroTutorSave questionWhich statement best distinguishes the role of a data owner from that of a data custodian?AThe custodian makes the initial information classification assignments, and the operations manager implements the scheme.BThe data owner implements the information classification scheme after the initial assignment by the custodian.CThe custodian implements the information classification scheme after the initial assignment by the operations manager.DThe data custodian implements the information classification scheme after the initial assignment by the data owner.Show AnswerAnswerExplanationThe data owner has authority and accountability for information, including establishing its classification and protection requirements. The data custodian applies and operates the information-classification scheme and associated safeguards after that classification is assigned. NIST defines an information owner as the official responsible for establishing controls for information, including its classification.Learn moreNIST CSRC: Information Owner GlossaryShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion