Certified in Risk and Information Systems Control (CRISC) — Question 81

An organization delegates its data processing to the internal IT team to manage information through its applications. Which of the following is the role of the internal IT team in this situation?

Answer options

• A. Data owners
• B. Data custodians
• C. Data controllers
• D. Data processors

Correct answer: B

Explanation

The internal IT team serves as Data custodians because they are responsible for managing and protecting the data on behalf of the data owners. Data owners retain ownership and control over data, while data controllers dictate how data is processed. Data processors, on the other hand, handle data processing tasks but do not have management responsibilities.