Cooperate with information system owners on the security requirements and security controls for the systems on which the data exist.Establish rules for data usage and protection.NIST SP 800-18 set outs several responsibilities for the information owner, as follows:

Although these duties are really important, they are delegable. So, the most significant duties that he has are classification and protection of all data sets.

It is important to remember that the data owner is ultimately responsible for the data, as he is the one that sets the security parameters and divides the corpus data into different class labels dependent on its sensitivity. Due diligence is the continued application of the security structure onto the IT infrastructure of an organization.вЂќД«oth notions hold great importance because if their existence is proved by the senior management, this fact per se may reduce the culpability and liability of the individuals responsible for a data breach, for example. For example, due care is developing a formalized security structure containing a security policy, standards, baselines, guidelines, and procedures. Due diligence is practicing the activities that maintain the due care effort. According to the 7 th edition of CISSP Official Study Guide, вЂњue care is using reasonable care to protect the interest of an organization. People in this role are liable for negligence provided that they fail to show due diligence with respect to enforcing security policies, which in turn will protect sensitive data.ДЄ CISSP candidate should expect to be tested on these concepts. Ownerless data is not a subject of protection, and therefore the recommended step is dubbed information lifecycle management (ILM) вЂ“ a process of assigning a data owner and set of controls to information.ДЄ data owner is typically the president, the CEO, or a department head (DH). As far as the description is concerned, its structure is similar to what is outlined for the вЂњt erm вЂњinformation owner/stewardвЂќ in the вЂњGovernance StructuresвЂќ section of Domain Four when referring to information governance structures,вЂќ according to the Official (ISC)2 Guide to the HCISPP CBK.Д®very set of data must have an owner.

That is de facto the person who is responsible and accountable for a particular set of data. The term вЂdata ownerвЂ™ may refer to those individuals within an organization who collect and define the metrics of the data. What comes next is a short description of the most important data roles one should know for the CISSP certification exam. Furthermore, security requires responsibility, and responsibility is based on a well-defined division of roles (even if security is supposed to be everyoneвЂ™s responsibility). Despite this setback, a close and deep familiarity with security roles within a company would improve workplace communication and promote organizational culture by all means, as well as enable enforcement of the companyвЂ™s security policy. Security roles have a volatile nature вЂ“ meaning, they are not always distinct and static hence, they are not clearly defined in every job description. Based partially on the 7 th edition of CISSP Official Study Guide, this writing strives to help you answer one main question: What types of data roles and responsibilities do I need to know for the CISSP?

Program data creator owner