A financial software company is formalizing its data governance roles to align with security frameworks and compliance standards. The security steering committee must separate technical operational management from executive business governance. Which of the following responsibilities fall directly under the role of the Data Custodian? (Select TWO.)
- Applying technical access controls, database encryption baselines, and regular backup operationsCevap
- BDetermining formal sensitivity classification levels and approving user access requests for corporate datasets
- Maintaining storage infrastructure integrity by executing routine system patching and backup restoration testingCevap
- DEstablishing business data retention requirements and defining legal compliance rules for customer records
Cevap
The duties belonging to the Data Custodian are implementing technical security controls (such as encryption, access lists, and backups) and maintaining the operational health and integrity of storage repositories (such as executing patches and restoration tests).
The Data Custodian is responsible for the technical administration, operational safeguarding, and hands-on maintenance of data systems. This includes applying technical controls like access control lists, maintaining encryption at rest, running routine backups, applying software patches, and regularly testing data restoration procedures.
Adım Adım Çözüm
Anahtar Kavram
Data Role Separation (Data Owner vs. Data Custodian)
Tahmini Süre:1m 30s