Question

Difficulty: MediumData Governance, Classification, and Privacy Controls

A specialized pharmaceutical research firm is establishing its enterprise data governance framework for clinical trial data stored in a cloud repository. A database administrator has been assigned the daily responsibility of configuring access control lists, managing data encryption at rest, performing scheduled system backups, and ensuring the technical integrity of the storage environment based on policies defined by business executives. Which data governance role best describes the operational duties assigned to this database administrator?

  1. Data custodianAnswer
  2. B
    Data owner
  3. C
    Data Protection Officer (DPO)
  4. D
    Identity provider (IdP)

Answer

The role that best describes the database administrator's operational duties is the Data Custodian.
The data custodian is responsible for operational and technical implementation of security controls, including performing backups, configuring technical permissions, maintaining system integrity, and implementing data protection mechanisms like encryption according to directives set by the data owner.

Step-by-Step Solution

1
Analyze the administrative duties described in the scenario.
The tasks involve configuring technical access controls, applying encryption, running backups, and maintaining storage infrastructure integrity.
Identifying whether the responsibilities are technical/operational versus strategic/executive is key to assigning the correct governance role.
2
Map the identified technical duties to standardized CompTIA Security+ data governance roles.
The individual implementing technical controls and maintaining storage assets under business policy directives is acting as a Data Custodian.
Data custodians handle hands-on system administration and technical enforcement of data protection policies.

Key Concept

Data Governance Roles (Data Owner vs. Data Custodian)
Rate this question