ExamTopics Logo
Mail Us[email protected]
Menu
Isc Discussions
exam questions

Exam CISSP All Questions

View all questions & answers for the CISSP exam
Go to Exam

Exam CISSP topic 1 question 164 discussion

Actual exam question from ISC's CISSP
Question #: 164
Topic #: 1
[All CISSP Questions]

The Chief Information Officer (CIO) has decided that as part of business modernization efforts the organization will move towards a cloud architecture. All business-critical data will be migrated to either internal or external cloud services within the next two years. The CIO has a PRIMARY obligation to work with personnel in which role in order to ensure proper protection of data during and after the cloud migration?

  • A. Chief Security Officer (CSO)
  • B. Information owner
  • C. Chief Information Security Officer (CISO)
  • D. General Counsel
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by Vino22 at Oct. 8, 2022, 2:32 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
izaman2022
Highly Voted 2 years, 7 months ago
I think in the context of the CISSP, the CISO generally reports to the CIO. So in this case, the CIO primarily needs to work with the CISO. The next logical step is that the CISO would work with the information owners to properly protect the data
upvoted 5 times
jackdryan
2 years ago
B is correct
upvoted 3 times
...
...
BigITGuy
Most Recent 1 month, 2 weeks ago
Selected Answer: B
"during and after" ... Tricky question. C is a trap. The CISO is responsible for implementing security controls and advising on best practices, but the information owner decides what protection is required. The information owner is the role primarily responsible for defining the classification, sensitivity, and security requirements for business-critical data.
upvoted 1 times
...
easyp
3 months, 2 weeks ago
Selected Answer: C
All the AI said C The CIO's primary obligation in ensuring data protection during and after a cloud migration is to work with the C. Chief Information Security Officer (CISO). While collaboration with other roles is important, the CISO is specifically responsible for developing and implementing the security strategy and controls necessary to protect the organization's data, regardless of where it resides (on-premises or in the cloud). They are the key individual for addressing the security implications of the cloud migration.
upvoted 1 times
...
TheManiac
12 months ago
Selected Answer: B
I'd say B. It says primary obligation, not about hierarchy or sth. You can do this move without the CISO. Can you do it without the information owner? You are moving the information to cloud. owners are responsible with these information. You are obliged to do with this personnel. Sorry, dear ciso.
upvoted 4 times
...
Vasyamba1
1 year, 1 month ago
Selected Answer: B
CIO will not get other title, he will remain CIO.
upvoted 1 times
...
homeysl
1 year, 2 months ago
Selected Answer: B
B for Data Owner
upvoted 1 times
...
gjimenezf
1 year, 4 months ago
Selected Answer: C
CIO is a top management, he will not be working with lots of Information owners of lower levels in the company, he works closely with CISO
upvoted 2 times
...
CoolCat22
1 year, 5 months ago
Selected Answer: B
B since it says proper protection of data.
upvoted 1 times
...
Soleandheel
1 year, 5 months ago
C. Chief Information Security Officer (CISO)
upvoted 1 times
...
HughJassole
1 year, 10 months ago
C. The question asks for protection of data "The CISO's responsibilities include developing, implementing, and enforcing security policies to protect critical data. " https://www.cisco.com/c/en/us/products/security/what-is-ciso.html
upvoted 2 times
Treebeard88
6 months, 4 weeks ago
Although many CISOs report to the CIO, that organizational structure is now considered to be a conflict of interest. More and more Fortune 500 companies have made the CISO coequal with the CIO. In these companies the CISO may report to the chief technology officer (CTO), the chief security officer (CSO), the chief risk officer (CRO), or even the chief operating officer (COO) or chief executive officer (CEO). CISO reporting to CIO is now likely seen as a conflict of interest. The owner of the data still has a responsibility to ensure proper protection of the data that they own.
upvoted 1 times
...
...
oudmaster
2 years, 5 months ago
Information Owner (or Data Owner) they own the data and usually the CIO report to them. While CISO reports to CIO. ! In my opinion, for the CIO to ensure the proper protection for the data, he should understand what is the protection requirement from the data owner first.
upvoted 3 times
...
Jamati
2 years, 6 months ago
Selected Answer: C
CIO works with the CISO
upvoted 1 times
...
Vino22
2 years, 7 months ago
i would go for B since it says proper protection of data.
upvoted 2 times
franbarpro
2 years, 6 months ago
Information owner don't protect data.... they create and work with the data.
upvoted 2 times
Vasyamba1
1 year, 1 month ago
Information owner is responsible to define controls and ensure data is protected properly.
upvoted 4 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago