Certified in the Governance of Enterprise IT (CGEIT) — Question 155

An IT governance committee wants to ensure there is a clear description of the "data owner" in the enterprise data policy. Which of the following would BEST define the owner of data stored in an external cloud?

Answer options

• A. The contract manager who monitors the security of the cloud provider
• B. The vendor who submits the data to the organization via online forms
• C. The business leader who is most impacted by the loss of data
• D. The risk manager who is responsible for protecting data stored in the cloud

Correct answer: C

Explanation

The correct answer is C because the business leader most impacted by data loss has the greatest stake in the data's integrity and availability. Options A and D focus on roles related to security and risk management, which, while important, do not directly define ownership. Option B identifies a vendor's role rather than the actual data owner within the organization.