Data Ownership vs Stewardship in Security Roles
Summarize fundamental security concepts.
Which of the following data roles is responsible for identifying risks and appropriate access to data?
Answer
Correct answer: A — The Data Owner is responsible for identifying risks associated with the data and determining who has appropriate access to it.
Community Votes
71% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The common trap is confusing the strategic authority of the Owner with the tactical governance duties of the Steward; remember that 'responsibility' in this context often implies ultimate accountability.
This question tests the distinction between Data Owner and Data Steward roles. The correct answer is A (Owner) because the Owner holds accountability for risk identification and access authorization.
Many learners select C (Steward) because stewards manage data quality and access controls, but they do so based on policies defined by the Owner, not by identifying risks or authorizing access themselves.
Community Discussion (17 comments)
a4e15bd
👍 26
A. Owner The data owner is indeed responsible for identifying risks and determining the appropriate access to data.
jbmac
👍 5
Selected: A
The correct answer is: A. Owner Explanation: The data owner is responsible for determining the appropriate access to data and identifying the risks associated with it. The data owner typically defines the security and access control policies for data within an organization. This role ensures that data is managed in accordance with organizational policies and compliance requirements, and identifies risks related to the data’s confidentiality, integrity, and availability.
9149f41
👍 3
Selected: A
Owner: The data owner is responsible for identifying risks associated with the data and determining who has appropriate access to it. Owners make decisions about data classification, access controls, and usage policies. Custodian: Data custodians are responsible for the day-to-day maintenance and protection of data based on the rules set by the owner. They implement access controls, backup procedures, and security measures but do not decide who should access the data. The data owner is ultimately accountable for the security and access decisions related to the data. They evaluate risks and establish the appropriate access controls to protect it. While Custodian is an important role in data management, it is not primarily responsible for identifying risks and determining appropriate access to data.
ProudFather
👍 1
Selected: C
A data steward is responsible for defining, maintaining, and communicating data policies and standards. This includes identifying risks associated with data and determining appropriate access controls to protect sensitive information.
e2ba0ff
👍 2
Selected: A
Data owner:A senior executive responsible for labeling information assets and ensuring they are protected with appropriate controls
AndyK2
👍 1
Selected: C
I'd go with Steward. Owner: Overall accountability for data Custodian: Technical management and storage Controller: Determines purposes and means of data processing Controller is primarily used in European Law (GDPR) - according to the CompTIA book. While there's some overlap, the specific task of "identifying risks and appropriate access to data" aligns more closely with the Data Steward role. Custodians implement the technical controls, but Stewards define what those controls should be based on risk assessment.
saba263
👍 3
Selected: A
A. Owner The Owner of the data is responsible for identifying risks and determining appropriate access to the data. The data owner has the authority and accountability for defining who can access the data, what kind of access is allowed (e.g., read, write), and ensuring the data is protected according to organizational policies and compliance requirements. This role is crucial for data governance and risk management.
9ef4a35
👍 3
A. Owner
Frez
👍 1
Selected: B
Sounds like CUSTODIAN to me.... Data Custodian: Manages access controls and technical security measures to protect data
Murtuza
👍 2
Selected: A
Data Owners are accountable for the data within their domain, including defining access policies and managing risks associated with the data1. They ensure that data is used appropriately and securely.
famuza77
👍 1
Selected: B
this is weird, Data Custodian and Steward are the same think regarding videos on Youtube
User92
👍 3
Selected: C
The data owner is typically responsible for the overall management of the data. A Data Steward is tasked with managing data quality, ensuring data governance policies are followed, and identifying risks related to data handling and access.
Ty13
👍 2
Selected: A
A. Owner The Data Owner is chiefly responsible for identifying risks related to the data and determining who should have access to it.
Chrisssy6111
👍 1
A. Owner, data steward is just another name for data custodian that Comptia uses.
opeyemi777
👍 3
Selected: A
Ensuring that adequate and timely risk identification and access to appropriate data is performed is the responsibility of the owner
Hayder81
👍 4
C. Steward Data Steward: Oversees data governance policies, ensures data quality, manages access control, and helps in identifying risks to ensure proper use of data.
apant
👍 3
Selected: C
C. Steward
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
In security frameworks like NIST SP 800-122 and general data governance standards, the Data Owner is the senior official accountable for the data asset. This role is responsible for classifying the data, identifying risks associated with it, and determining who has appropriate access rights. The Owner defines the security policy, making them the primary entity for risk and access decisions.Why the Other Options Are Wrong
Custodians (B) implement the controls and perform day-to-day maintenance as directed by the Owner. Stewards (C) ensure data quality and compliance with policies but typically operate under the guidance of the Owner. Controllers (D) are a privacy law term (e.g., GDPR) rather than a standard operational security role in this specific context, and even then, ownership concepts map closely to controllership, but "Owner" is the standard ISACA/CompTIA terminology for this function.Community Comment Notes
The community majority correctly identified A. As user jbmac noted, the Owner determines access and identifies risks. However, some users like Hayder81 argued for Steward, citing oversight duties, but this conflates governance execution with ultimate accountability.Exam Strategy
When distinguishing between Owner and Steward, focus on 'Accountability' vs 'Execution'. The Owner is accountable for the 'What' and 'Who' (Risk & Access), while the Steward/Custodian handles the 'How' (Quality & Implementation).
Frequently Asked Questions
Why isn't the Data Steward responsible for access?
Stewards manage data quality and ensure policies are followed, but the Owner defines those policies and authorizes access.
What is the difference between Owner and Custodian?
Owners define security requirements and access rules; Custodians implement technical controls and maintain the data daily.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →