Exam CRISC topic 1 question 638 discussion

The key is to note the statement "internal IT team to manage information through its applications" The data custodian is an individual(s) or department(s) responsible for the storage and safe guarding of computerized data. Since the question is about Managing the information, the solution should be Data Custodian. Happy to hear from other experts.

Data processors are typically external entities or teams that process data on behalf of a data controller. While the internal IT team is responsible for processing data through applications, in a broader context, data processor refers to an entity that processes personal data as part of their contractual relationship with the data controller. In this case, if the internal IT team is directly involved in processing data but under the control and direction of the data owner (e.g., business units), they act as data custodians, not as independent processors.

B. Data Custodians: This role is responsible for the safe custody, transport, storage of the data and implementation of business rules. Essentially, they are in charge of the technical environment and database systems where data is stored and managed. They ensure that data is accessible to those who need it and protected from those who don't.

D. Data processors. In this situation, the internal IT team is responsible for processing and managing the organization's data through its applications. They handle the technical aspects of data processing, ensuring that data is stored, transmitted, and processed according to the organization's policies and procedures. As such, they function as data processors, responsible for the technical aspects of data management and processing, but they typically do not have ownership or decision-making authority over the data (data owners). Data controllers, on the other hand, typically have authority over data processing activities and ensure that they comply with relevant data protection regulations. Data custodians are responsible for safeguarding and protecting data, often under the direction of data owners or data controllers.

B data custodian, the CRISC manual doesn't even mention a data processor

Believe it is D.

yes, best 'D', reason: In the context of the question, however, it is important to note that the IT team is responsible for managing information through the organization's applications, which suggests that they may be performing the role of data processors. The distinction between data custodians and data processors can sometimes depend on the specific responsibilities and activities of the individuals or teams involved, as well as the organization's policies and practices.

should be D

Data custodian The individual(s) and department(s) responsible for the storage and safeguarding of computerized data.

the key world is delegates to IT teams. which means it is not their original responsibility. Data custodian seems always a IT teams responsibility, but data process is not, like input data, delete data etc. So i will pick D as an answer.

I will go with D , as here IT department assigned responsibility of data processing.

Giving these definitions, the answer should be D. Data Processor – typically an entity that works under the direction of the owner/controller, such as an IT department. Data Custodian – the role within the processing entity (IT department) that handles the data daily. https://cissprep.net/data-ownership/

I will go with D

But the stem stated "data processing". Isn't the Data Processor is also valid?