Security+ Data Classification/Labels and Roles and Responsibilities

Question	Answer
Public (Unclassified)	no restrictions
Private	info about a specific individual identity
Sensitive	generally used in the context of personal data
Confidential (Secret)	highly-sensitive viewable by approved personnel or individuals that have signed an NDA
Critical (Top Secret)	info too valuable to be released to anyone outside of the organization
Proprietary (Intellectual Property)	info created and owned by the organization
Data Owner	senior exec with ultimate responsibility for the CIA of data does not perform the duties to do so, assigns those roles
Data Steward	responsible for data quality add metadata to ensure data is labeled correctly
DPO	responsible for ensuring that PII laws and regulations are maintained and followed
Data Controller	ultimate responsibility, in a legal sense, for any privacy breaches
Data Custodian	manage the data systems enforce access control and encryption of the data
Data Processor	works with the data controller as technical assistants in order to collect, share, and analyze data
IRM	Information Rights Management allows admins to restrict classified docs from being printed, copied, or sent as email attachments found in MS Azure and Adobe Acrobat

Resource summary

	Created by Lyndsay Badding about 1 year ago