Examkin

Soru

Zorluk: OrtaData Governance, Classification, and Privacy Controls

A multinational logistics company is formalizing its enterprise data governance structure to align with international privacy regulations. During the implementation phase, executive leadership must designate the specific role responsible for defining data sensitivity classifications, establishing access approval policies, and approving retention and destruction timelines for customer transport records. Which of the following roles holds ultimate business accountability for making these governance decisions?

  1. Data ownerCevap
  2. B
    Data custodian
  3. C
    Security control assessor
  4. D
    Identity and access manager

Cevap

The data owner is the role accountable for establishing classification rules, access governance policies, and retention requirements.
The data owner is the individual or entity holding ultimate business authority over a dataset. They determine data classification tiers, specify access permissions, mandate encryption standards, and set retention policy guidelines.

Adım Adım Çözüm

1
Analyze the organizational scenario requirements
Identified tasks: defining classification levels, establishing access approval rules, and approving retention/destruction schedules.
Governance tasks require identifying the role with strategic governance authority rather than operational maintenance duties.
2
Differentiate between data ownership and technical administration roles
The data owner holds ultimate business responsibility for data assets, whereas custodians handle technical enforcement.
CompTIA Security+ governance principles assign data asset classification authority explicitly to data owners.

Anahtar Kavram

Data Owner vs Data Custodian Responsibilities
Bu soruyu puanla

Konular

Data Governance, Classification, and Privacy Controls

Bu konudan daha fazla soru