Who is responsible for ensuring that information is classified?
A.
Senior management
B.
Security manager
C.
Data owner
D.
Custodian
Explanation:
The data owner is responsible for applying the proper classification to the data. Senior management is ultimately responsible for the organization. The security officer is responsible for applying security protection relative to the level of classification specified by the owner. The technology group is delegated the custody of the data by the data owner, but the group does not classify the information.
C
0
0
Data owners are responsible for information classification, then I don’t think that they should be responsible for Ensuring that the information is classified. Based on the principle of segregation of duties, a different party should be responsible for ensuring that the classification is done. I would say it is senior management responsibility.
0
0