Examkin

Question

Difficulty: MediumData Governance, Classification, and Privacy Controls

A multinational logistics company is formalizing its enterprise data governance structure to align with international privacy regulations. During the implementation phase, executive leadership must designate the specific role responsible for defining data sensitivity classifications, establishing access approval policies, and approving retention and destruction timelines for customer transport records. Which of the following roles holds ultimate business accountability for making these governance decisions?

  1. Data ownerAnswer
  2. B
    Data custodian
  3. C
    Security control assessor
  4. D
    Identity and access manager

Answer

The data owner is the role accountable for establishing classification rules, access governance policies, and retention requirements.
The data owner is the individual or entity holding ultimate business authority over a dataset. They determine data classification tiers, specify access permissions, mandate encryption standards, and set retention policy guidelines.

Step-by-Step Solution

1
Analyze the organizational scenario requirements
Identified tasks: defining classification levels, establishing access approval rules, and approving retention/destruction schedules.
Governance tasks require identifying the role with strategic governance authority rather than operational maintenance duties.
2
Differentiate between data ownership and technical administration roles
The data owner holds ultimate business responsibility for data assets, whereas custodians handle technical enforcement.
CompTIA Security+ governance principles assign data asset classification authority explicitly to data owners.

Key Concept

Data Owner vs Data Custodian Responsibilities
Rate this question

Topics

Data Governance, Classification, and Privacy Controls

More questions from this topic