Cyberstudy
PDF p.384 In progress Not in the PDF's table of contents

Data Governance Roles

Open PDF at p.384 9 flashcards

Summary

PDF p.384

Data governance relies on roles such as owner, controller, processor, and custodian, each with unique responsibilities to maintain security oversight and control.

In plain words

Supplementary — not from your PDF

Data governance assigns roles. The owner is accountable for protection, classifies data and sets access. The controller decides why and how data is processed and ensures legal compliance. The processor processes data on the controller's behalf and keeps records. The custodian safeguards, stores and transports data and enforces controls.

Detailed explanation

PDF p.384
  • Owner
    • Role: Ensure data protection, classify data, decide access levels, and provide strategic guidance.
  • Controller
    • Role: Define data processing purposes and ensure legal compliance.
  • Processor
    • Role: Process data on behalf of the controller, maintain records, and implement security measures.
  • Custodian
    • Role: Safeguard, transport, and store data, and enforce security controls.

Important terms

taken from the text above
Owner
Data protection and classification.
Controller
Legal compliance.
Processor
Data processing and security.
Custodian
Data storage and enforcement.

Examples & real-world scenarios

Supplementary — not from your PDF
  • A department head as data owner classifying records.
  • A cloud provider acting as processor.
  • IT staff as custodians enforcing storage controls.

Scenario

A company uses a third-party analytics firm. The company is the controller (it decides the purpose) and the analytics firm is the processor (it acts on the company's instructions).

Common mistakes

Supplementary — not from your PDF
  • Confusing controller (decides purpose) and processor (acts on instructions).
  • Confusing owner (accountable, classifies) and custodian (hands-on protection).

Practical skills

Supplementary — not from your PDF
  • Assign data governance roles in a scenario.

What I should remember

Key Points PDF p.384
  • Owner: Data protection and classification.
  • Controller: Legal compliance.
  • Processor: Data processing and security.
  • Custodian: Data storage and enforcement.