SSCP: Systems Security Certified Practitioner

By ISC · Question Mode

QuestionQ5

VerifiedRisk Identification, Monitoring and Analysis

Who is best able to determine the appropriate technical security controls for a computer-based application system, considering protection of the data used, the data’s criticality, and its sensitivity level?

Explanation

The data or information owner is accountable for classifying information and establishing the protection requirements and controls appropriate to its sensitivity and criticality. NIST defines an information owner as the official responsible for establishing controls for an information’s generation, classification, collection, processing, dissemination, and disposal.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!