Data, system, mission ownership, custodians and users

Roles and responsabilities

Each role has unique roles and responsibilities to keep the data safe.

Mission/business owner

Senior executives make the policies that govern our data security.

Data/information owner

Management level, they assign sensitivity labels and backup frequency.

This could be you or a data owner from HR, payroll or other departments.

System owner

Management level and the owner of the systems that house the data.

Often a data center manager or an infrastructure manager.

Data custodian

These are the technical hands-on employees who do the backups, restores, patches, system configuration. They follow the directions of the data owner.

Users

These are the users of the data. User awareness must be trained; they need to know what is acceptable and what is not acceptable, and the consequences for not following the policies, procedures and standards.

Data controllers and data processors

• Controllers create and manage sensitive data in the organization (HR/Payroll)

• Processors manage the data for controllers (Outsourced payroll)