Which data role is responsible for assigning sensitivity labels to data and authorizing access requests?
A CISSP practice question covering Domain 2: Asset Security. Try answering before reading the explanation below.
Show options & answer
Why "Data owner" is the right answer
The data owner — typically a senior business stakeholder — is accountable for the asset's classification and access decisions. Custodians (often IT) implement and operate controls. Processors handle data on behalf of a controller. Data subjects are the individuals the data describes.
Take the full CISSP practice test
120 questions, instant explanations, study-video links on every miss. No account.