4.2

Question 1

Data protection

Answer 1

safeguarding info from corruption compromise or loss

Question 2

Data Ownership

Answer 2

the process of identifying the individual responsible for maintaining the confidentaility, integrity and availability of info assets
IT should not be the data owner they should be from the business side

Question 3

Data owner

Answer 3

a senior exec who labels info assets and ensures they are protected with appropriate controls

Question 4

Data controller

Answer 4

entity responsible for labeling information assest and ensuring they are protected with appropriate controls

Question 5

Data processor

Answer 5

a group or individual hired by the data controller to assit with tasks like data collection and processing,

Question 6

data stewardship

Answer 6

focuses on data quality and metadata ensuring data is appropriately labeled and classified

Question 7

data custodian

Answer 7

responsible for mananging the systems on which data assets are stored including enforcing access controls encryption and backup measures

Question 8

Privacy officer

Answer 8

oversees privacy related data such as PII SPI or PHI