CISSP Practice Question (Domain 2: Asset Security / Data Ownership & Accountability)

A company migrates sensitive business data to a shared analytics environment used by multiple departments. Data accuracy issues emerge, but no single group can authorize correction because ownership is unclear. Leadership wants faster decisions without creating a centralized bottleneck.

What is the MOST appropriate governance action to take FIRST?

A. Assign a single enterprise data steward for all analytics data

B. Define data ownership and decision authority at the dataset level

C. Implement stricter change control over analytics transformations

D. Increase audit logging for data modifications and access

Come back for the answer tomorrow, or study more now!

19 comments