CISSP Exam QuestionsBrowse all questions from this exam

CISSP Exam - Question 185


Which of the following roles is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications?

Show Answer
Correct Answer: A

The Data Custodian is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications. This role includes the physical care and protection of data, ensuring that data is backed up, stored securely, and that access controls are in place to protect the data. Additionally, Data Custodians monitor access to the data and ensure that the data is accurate, complete, and accessible in accordance with the organization's policies and procedures.

Discussion

15 comments
Sign in to comment
Peduk70Option: D
Oct 2, 2022

D is correct. Data Owners are responsible for protecting data and implementing policies that define the appropriate use of the data. Data Custodians are responsible for the safe custody, transport, and storage of the data

CuteRabbit168Option: A
Sep 12, 2022

Data custodians are established to ensure that important datasets are developed, maintained, and are accessible within their defined specifications.

jackdryan
May 13, 2023

A is correct

YanjunOption: A
Sep 17, 2022

data custodian

DJOEKOption: D
Jan 7, 2023

The Data Owner is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications. Data Owners have the authority to make decisions about how their data is used and managed, and they are responsible for ensuring that the data is used appropriately and in accordance with relevant laws and regulations. Data Owners are also responsible for ensuring that their data is protected from unauthorized access or disclosure, and for developing and implementing policies and procedures for managing and protecting the data. The Data Custodian is responsible for maintaining and protecting the data, but they are not responsible for ensuring that the datasets are developed and are accessible within their defined specifications. That responsibility would typically fall to the Data Owner or possibly the Data Reviewer. The Data User is responsible for accessing and using the data, but they are not typically responsible for its development or maintenance.

RollizoOption: A
Oct 1, 2022

custodian. Data owner only establish to the beginning the data governance rules

somkiatrOption: D
Jan 8, 2023

Agreed with D. A Data Custodian is responsible for implementing and maintaining security controls for a given data set in order to meet the requirements specified by the Data Owner in the Data Governance Framework. Reference : https://blog.idatainc.com/data-governance-roles

Nicola_2_RegOption: A
Sep 14, 2023

Data Owner : Top level/Primary responsibility for data, Define level of classification, Define controls for levels of classification Data custodian : Ensure compliance with data policy and data ownership guidelines The question specify who ensure the compliance with specification therefore it should be "data custodian".

SoleandheelOption: D
Dec 11, 2023

D. Data Owner The Data Owner is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications.

Soleandheel
Dec 11, 2023

Even though the Data Custodians focus on the safeguard and custody of data, they don't develop the datasets. This is the primiary responsibility of the data owner. As such, the correct answer here is definitely D. Data Owner.

GPrepOption: A
Jan 7, 2024

Tough question but I'm going with A (after much deliberation). The key (for me) is the word responsible, not accountable...think RACI (Responsible, Accountable, Consult, Inform). The data owner is ultimately accountable for everything, though the data custodian is responsible (delegated responsibility by the data owner) for ensuring the day-to-day is running as expected.

klarakOption: D
Apr 19, 2024

Answer is D as the owner is ultimately responsible for ensuring these details. It's not A because the Data Custodian is mostly just responsible for data at rest, if you think about it.

Dee83Option: A
Jan 24, 2023

A. Data Custodian A data custodian is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications. The data custodian is responsible for the physical care and protection of data, including ensuring that data is backed up, stored securely, and that access controls are in place to protect the data. Additionally, data custodians are also responsible for monitoring access to the data, and for ensuring that the data is accurate, complete, and accessible in accordance with the organization's policies and procedures. While the Data Owner is responsible for the overall management of a specific set of data, including determining who can access it, and for what purpose. The Data Reviewer is responsible for reviewing the data to ensure that it is accurate,

Destcert
Oct 31, 2023

Data owner is accountable for data while Data custodian is responsible for technical development and maintenance of data. As the question ask responsible for maintaining I too think it's data custodian role .

RollingalxOption: A
Feb 12, 2023

A is correct

GPrepOption: A
Dec 20, 2023

Initially, I thought D, however, after additional review, I'm going with A. The key words here are "responsible" (as opposed to accountable) and "within their defined specifications". The Data Owner is "accountable" AND defines the specs whereas the Data Custodian is "responsible" and works within specs which have already been defined. https://blog.satoricyber.com/the-datamasters-data-owners-vs-data-stewards-vs-data-custodians/

xxxBadManxxxOption: D
Mar 14, 2024

The correct answer is D. Data Owner. The Data Owner is responsible for ensuring that important datasets are developed, maintained, and accessible within their defined specifications. They have ownership and control over the data, making decisions regarding its management, security, and access.

Vasyamba1Option: A
Mar 23, 2024

Think it's Data Custodian as specifications are already defined by the Owner.