Exam CISA All QuestionsBrowse all questions from this exam
Question 1226

Who is responsible for authorizing data access for users?

    Correct Answer: A

    The information owner is responsible for authorizing data access for users. This role is accountable for managing and approving access to the data they own, ensuring that those who need access for their job have the appropriate permissions while maintaining data security and compliance with policies.

Discussion
SwallowsOption: A

The information owner is responsible for managing and approving access to their specific data. While other roles (CIO, security administrator, DBA) are important from a security and management perspective, the ultimate authority for approving access rests with the information owner.