Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Straight from Google. The answer is Owner • The Data Owner identifies risks and defines access. Because they are senior business leaders (like a CFO or VP of Sales), they understand the business value of the information. They decide the intent: what the data classification should be, what level of risk the company can tolerate, and who legally has the right to see it. • The Data Steward manages day-to-day adherence. They act as the operational subject matter expert. They ensure the data's quality and meaning match the owner's intent, and they help translate high-level access policies into functional rules. (Note: In some narrow exam contexts or custom company frameworks, you may see a Steward tasked with flagging functional risks or reviewing access requests, but they do not hold the ultimate authority to set those access rules.) • The Data Custodian implements the access. The custodian (usually IT or a database administrator) has no say in who should have access or what the risks are. Their job is strictly to enforce the owner's decisions by implementing technical controls, managing encryption, and configuring the system permissions.
Data custodian/steward – Responsible for data accuracy, privacy, and security • Works directly with the data – Associates sensitivity labels to the data – Ensures compliance with any applicable laws and standards – Manages the access rights to the data – Implements security controls
The data owner is typically the person or entity accountable for a specific set of data. They are responsible for: Identifying risks associated with the data Defining access policies and determining who should have access Ensuring that data is handled in compliance with regulations and internal policies They make decisions about classification, protection, and usage of the data.