Question

Difficulty: EasyData Governance, Classification, and Privacy Controls

A software firm utilizes a cloud database service to store business records. The firm's executive leadership designates an internal department manager to establish access permissions, assign classification sensitivity levels, and dictate data retention rules for these records. Which of the following data governance roles is this department manager performing?

  1. Data ownerAnswer
  2. B
    Data custodian
  3. C
    Data processor
  4. D
    Data protection officer

Answer

Data owner
The data owner (sometimes referred to as the data controller or business owner) has primary responsibility and legal accountability for a dataset. This includes defining data sensitivity classifications, establishing access control policies, and setting data lifecycle and retention rules.

Step-by-Step Solution

1
Identify the primary responsibilities described in the scenario
The individual establishes access permissions, assigns data classification levels, and dictates retention policies.
Governance roles are categorized by whether they hold policy/business authority or technical execution duties.
2
Map the responsibilities to official CompTIA Security+ data governance roles
The manager holds executive business responsibility and policy-setting rights for the dataset, which defines the Data Owner role.
Data owners specify how data should be labeled and protected, whereas custodians perform technical tasks like database administration.

Key Concept

Data Owner vs. Data Custodian Responsibilities
Estimated Time:45s
Rate this question