Which of the following are the tasks performed by the owner in the information classification schemes? Each correct answer represents a part of the solution. Choose three.
A.
To make original determination to decide what level of classification the information requires, which is based on the business requirements for the safety of the data.
B.
To review the classification assignments from time to time and make alterations as the business requirements alter.
C.
To delegate the responsibility of the data safeguard duties to the custodian.
D.
To perform data restoration from the backups whenever required.
Explanation:
The different tasks performed by the owner are as follows:
He makes the original determination to decide what level of classification the information requires, which is based on the business requirements for the safety of the data. He reviews the classification assignments from time to time and makes alterations as the business needs change.
He delegates the responsibility of the data safeguard duties to the custodian. He specifies controls to ensure confidentiality, integrity and availability.Answer option D is incorrect. This task is performed by the custodian and not by the owner.
Reference: CISM Review Manual 2010, Chapter: "Information Security Governance"