Section 7.61 Data Ownership

Question 1

Data Ownership

Answer 1

Process of identifying the individual responsible for maintaining the confidentiality, integrity, availability, and privacy of information assets

Question 2

Data Owner

Data Owner

Data owner hires a data steward

Answer 2

A senior executive responsible for

• Labeling information assets
• Ensure data is protected with appropriate controls

Not the creator of the data

Question 3

Data Controller

CSU

Data Controller hires a Data Processor

Answer 3

Entity responsible for data…

• Collection
• Storage
• Usage

Ensuring the LEGAILITY of these processes.

e.g If your organisation collects information from your employees to carry out payroll operations then that makes the organisation the Data Controller for that employee information.

Holds ultimate accountability to any breeches of privacy and cannot delegate this responsibility.

Question 4

Data Processor

Data Controller hires a Data Processor

Answer 4

A group or individual hired by the data controller to assist with tasks like data collection and processing

e.g A payroll company would accept the personal data from the data controller and use it to process payroll functions.

Question 5

Data Steward

Data owner hires a data steward

Answer 5

Usually a Business Manager thats focused on carrying out the Data Owners requirements.

Responsible for…

• Day to Day Data governance
• Data and Metadata quality
• Ensure Data is appropriately labeled and classified

Ensure Data is appropriately classified and works under the Data Owner

Question 6

Data Custodian

Answer 6

An I.T Professional knows as Data Base or System adminisrators responsible for managing the systems on which data assets are stored.

• Backup Measures
• Enforcing Access Controls
• Implement Business Rules

Sytem administators or Data base administators

Question 7

Privacy Officer

Answer 7

Oversees privacy-related data ensuring compliance with legal and regulatory frameworks.

• Personally identifiable information (PII)
• Sensitive personal information (SPI)
• Protected health information (PHI)

Question 8

Data Ownership Responsibility

Answer 8

The IT department (CIO or IT personnel) should NOT be the data owner: data owners should be individuals from the BUSINESS SIDE who understand the data’s content and can make informed decisions about classification

Question 9

Selection of Data Owners

Answer 9

Data owners should be designated within their respective departments based on their knowledge of the data and its significance within the organisation

Note: Proper data ownership is essential for maintaining data security, compliance, and effective data management within an organization. Different roles contribute to safeguarding and managing data appropriately