CISM Certification Domain 1: Information Security Governance Video Boot Camp 2019 - Data owners

The video tutorial explains various roles and responsibilities in data security, including business owners, information owners, system owners, data custodians, users, data controllers, and data processors. It highlights the importance of policies, data sensitivity, system management, user training, and adherence to data handling standards. The tutorial emphasizes the need for clear roles to ensure data confidentiality, integrity, and availability.

Who is primarily responsible for creating data security policies?

• Data Custodians

• Business Owners

• System Owners

• Data Processors

What is the main responsibility of a system owner?

• Owning the physical or virtual systems

• Creating data security policies

• Training users on data policies

• Managing sensitive data

Which role is responsible for handling backups and system configurations?

• Data Controllers

• Data Custodians

• Information Owners

• Business Owners

What is a key responsibility of data controllers?

• Training users on data policies

• Creating data security policies

• Managing sensitive data throughout the organization

• Handling system configurations

What is the primary focus of data processors?

• Training users on data policies

• Owning physical or virtual systems

• Managing data for controllers with limited access

• Creating data security policies