Soru

Zorluk: OrtaData Governance, Classification, and Privacy Controls

A global media streaming service is updating its data governance architecture to comply with international privacy regulations. Match each data governance role on the left with its primary operational responsibility on the right.

  • Data OwnerDetermines data classification levels, defines access governance policies, and holds ultimate business accountability for data assets.
  • Data CustodianMaintains database integrity, configures access control lists, and executes technical backup procedures on storage systems.
  • Data Protection Officer (DPO)Monitors regulatory compliance, conducts privacy impact assessments, and serves as the official liaison to supervisory authorities.
  • Data ProcessorProcesses personal data exclusively under the direct instruction of an external data controller entity.

Cevap

Data Owner pairs with determining classification levels and business accountability; Data Custodian pairs with maintaining database integrity and technical backup procedures; Data Protection Officer (DPO) pairs with monitoring compliance and serving as liaison to supervisory authorities; Data Processor pairs with processing personal data under direct instruction of a data controller.
Each role corresponds strictly to CompTIA Security+ data governance definitions: the Data Owner defines classification and access permissions; the Data Custodian executes technical controls and backup routines; the Data Protection Officer oversees regulatory compliance and privacy assessments; and the Data Processor acts on behalf of an external data controller.

Adım Adım Çözüm

1
Differentiate executive data governance policy roles from technical execution roles.
The Data Owner establishes rules and classification, whereas the Data Custodian carries out technical maintenance and access enforcement.
CompTIA Security+ distinguishes business accountability (Data Owner) from operational technology administration (Data Custodian).
2
Differentiate regulatory privacy oversight roles from external processing entities.
The Data Protection Officer provides compliance oversight and authority liaison, while the Data Processor is a vendor executing instructions.
Privacy frameworks mandate independent internal oversight (DPO) while regulating contracted third-party processing activities (Data Processor).

Anahtar Kavram

Data Governance Roles and Operational Responsibilities
Bu soruyu puanla