Exam SY0-601 topic 1 question 288 discussion

As Comptia Guide mention. Data custodian—this role handles managing the system on which the data assets are stored. This includes responsibility for enforcing access control, encryption, and backup/recovery measures

A data custodian is a person or entity responsible for the storage, protection, and management of data assets. They are tasked with implementing and maintaining the necessary security controls to ensure the confidentiality, integrity, and availability of the data. In this case, the security engineer is responsible for applying encryption to the data on the hard disk, which falls under the role of a data custodian. They are entrusted with safeguarding the data and implementing the necessary security measures to protect it from unauthorized access or disclosure.

Data Custodian - the person who's going to do it

to apply encryption to the data - > data custodian ( apply.. move ..delete..)

per the Comptia study guide its C

Answer c. Data owner: The individual or entity that has ultimate responsibility for and decision-making authority over a particular dataset. In this scenario, the manager is the data owner as they are responsible for the data on the hard disk. Data custodian: An individual or entity entrusted with the day-to-day handling and protection of data on behalf of the data owner. The security engineer, tasked with applying encryption, is acting as a data custodian, carrying out technical tasks to safeguard the data as instructed by the data owner.

https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/data-roles-and-responsibilities/ The data controllers are responsible for the purposes and means by which the data is processed. The data processors are working on behalf of the data controllers, and sometimes this can even be a third-party. This is someone who’s responsible for the accuracy of the data, for keeping all of your data private, and the security associated with the data that’s stored in your systems. Just because your responsible of something doesn’t mean you’re the person doing the action.

The primary responsibilities of a data custodian are: Maintain physical and system security including physical security of servers and data user security as determined appropriate by the Data Trustees or Data Stewards.

Data custodians focus on "How", instead of "Why".

Per professor messer Data Custodians implement security controls on data. Encrypting the data is implementation of a security control C. correct

C. The security engineer is an example of a data custodian. A data custodian is a person or entity that is responsible for the storage, maintenance, and protection of data. In this case, the security engineer has been asked to apply encryption to the data on a hard disk, which involves protecting the data from unauthorized access or disclosure. The data controller, on the other hand, is the person or entity that determines the purposes, conditions, and means of the data processing. The data owner is the person or entity that has legal ownership or control over the data. The data processor is the person or entity that processes the data on behalf of the data controller.

The security engineer is an example of a data custodian. A data custodian is responsible for the storage, maintenance, and protection of data. They are responsible for ensuring that data is stored securely and that access to the data is restricted to authorized individuals.

Data Custodian manages the security of the data on behalf of the Data Owner. Data Controller & Data Processor are Data Protection terms (as distinct from infosec terms) defined in the GDPR & other Data Protection laws/regulations

Data Owner - A senior (executive) role with ultimate responsibility for maintaining the confidentiality, integrity and availability of the information asset. Data Steward - A role focussed on the quality of the data and associated metadata. Data Custodian - A role responsible for handling the management of the system on which the data assets are stored. Processor is there to confuse us.

Answer is D

The manager is data processor and the engineer is custodian

i believe the answer is Data Processor