James work as an IT systems personnel in SoftTech Inc. He performs the following tasks.
Runs regular backups and routine tests of the validity of the backup data. Performs data restoration from the backups whenever required. Maintains the retained records in accordance with the established information classification policy.
What is the role played by James in the organization?
A.
Custodian
B.
Owner
C.
User
D.
Manager
Explanation:
An information custodian is the individual who controls the responsibility of protecting the information by its owner regardless of a physical or logical location, storage medium, technology used, or the purpose. The tasks performed by a custodian are as follows .
He performs data restoration from the backups whenever required. He runs regular backups and routinely tests the validity of the backup data. He maintains the retained records in accordance with the established information classification policy.
He administers the classification scheme occasionally.
Answer options B and D are incorrect. An information owner can be an executive or the manager of an organization. The different tasks performed by the owner are as follows. He makes the original determination to decide what level of classification the information requires, which is based on the business requirements for the safety of the data. He reviews the classification assignments from time to time and makes alterations as the business needs change.He delegates the responsibility of the data safeguard duties to the custodian. He specifies controls to ensure confidentiality, integrity and availability. Answer option C is incorrect. Users are the consumers of the data, who need access to the information on a daily basis to execute their tasks.
Reference: CISM Review Manual 2010, Chapter. "Information Security Governance"
I agree with the answer. A