Certified Information Systems Security Professional (CISSP) — Question 23

In an IDEAL encryption system, who has sole access to the decryption key?

Answer options

• A. Data custodian
• B. System owner
• C. System administrator
• D. Data owner

Correct answer: D

Explanation

The correct answer is D, the Data owner, because they are the individual or entity that possesses the rights to access and manage the data, including the decryption key. The other roles, like the System owner, System administrator, and Data custodian, may have responsibilities related to the system or data but do not have exclusive rights to the decryption key.