Question: Who should determine data access requirements for an application hosted at an organization's data center? A. Business owner B. Information security manager C. Systems administrator
Who should determine data access requirements for an application hosted at an organization's data center?
- A. Business owner
- B. Information security manager
- C. Systems administrator
- D. Data custodian
Sounds simple question but the official answer (non-ISACA) blows me away - it picked C which I hard to fathom. I still keep my preference on A - the business owner who should have the administrative right to "determine" the data access requirement, unless I have misinterpreted the question? Please advice.
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
