Exam CISSP topic 1 question 185 discussion

D is correct. Data Owners are responsible for protecting data and implementing policies that define the appropriate use of the data. Data Custodians are responsible for the safe custody, transport, and storage of the data

Data custodians are established to ensure that important datasets are developed, maintained, and are accessible within their defined specifications.

Answer is D as the owner is ultimately responsible for ensuring these details. It's not A because the Data Custodian is mostly just responsible for data at rest, if you think about it.

Think it's Data Custodian as specifications are already defined by the Owner.

The correct answer is D. Data Owner. The Data Owner is responsible for ensuring that important datasets are developed, maintained, and accessible within their defined specifications. They have ownership and control over the data, making decisions regarding its management, security, and access.

Tough question but I'm going with A (after much deliberation). The key (for me) is the word responsible, not accountable...think RACI (Responsible, Accountable, Consult, Inform). The data owner is ultimately accountable for everything, though the data custodian is responsible (delegated responsibility by the data owner) for ensuring the day-to-day is running as expected.

Initially, I thought D, however, after additional review, I'm going with A. The key words here are "responsible" (as opposed to accountable) and "within their defined specifications". The Data Owner is "accountable" AND defines the specs whereas the Data Custodian is "responsible" and works within specs which have already been defined. https://blog.satoricyber.com/the-datamasters-data-owners-vs-data-stewards-vs-data-custodians/

D. Data Owner The Data Owner is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications.

Data Owner : Top level/Primary responsibility for data, Define level of classification, Define controls for levels of classification Data custodian : Ensure compliance with data policy and data ownership guidelines The question specify who ensure the compliance with specification therefore it should be "data custodian".

A is correct

A. Data Custodian A data custodian is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications. The data custodian is responsible for the physical care and protection of data, including ensuring that data is backed up, stored securely, and that access controls are in place to protect the data. Additionally, data custodians are also responsible for monitoring access to the data, and for ensuring that the data is accurate, complete, and accessible in accordance with the organization's policies and procedures. While the Data Owner is responsible for the overall management of a specific set of data, including determining who can access it, and for what purpose. The Data Reviewer is responsible for reviewing the data to ensure that it is accurate,

Agreed with D. A Data Custodian is responsible for implementing and maintaining security controls for a given data set in order to meet the requirements specified by the Data Owner in the Data Governance Framework. Reference : https://blog.idatainc.com/data-governance-roles

The Data Owner is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications. Data Owners have the authority to make decisions about how their data is used and managed, and they are responsible for ensuring that the data is used appropriately and in accordance with relevant laws and regulations. Data Owners are also responsible for ensuring that their data is protected from unauthorized access or disclosure, and for developing and implementing policies and procedures for managing and protecting the data. The Data Custodian is responsible for maintaining and protecting the data, but they are not responsible for ensuring that the datasets are developed and are accessible within their defined specifications. That responsibility would typically fall to the Data Owner or possibly the Data Reviewer. The Data User is responsible for accessing and using the data, but they are not typically responsible for its development or maintenance.

custodian. Data owner only establish to the beginning the data governance rules

data custodian