5.1 Summarize elements of effective security governance.

Question 1

Data Owner

Answer 1

■ A senior executive responsible for labeling information assets and ensuring they
are protected with appropriate controls

Question 2

Data Controller

Answer 2

■ Entity responsible for determining data storage, collection, and usage purposes
and methods, as well as ensuring the legality of these processes

Question 3

Data Processor
■ A group or individual hired by the data controller to assist with tasks like data
collection and processing