MENU
An IT department has provided a shared drive for personnel to store information to which all employees have access. Which of the following parties is accountable for the risk of potential loss of confidential information?
Suggested Answer: D
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
SA
Salome
11 months ago
Wow, I didn't know the data owner was the key player here!
MA
Mary
11 months ago
Really? I thought the risk manager would handle this.
TA
Taryn
12 months ago
Wait, isn't the end user also accountable for what they share?
SA
Sabina
12 months ago
I think the IT department shares some responsibility too.
FE
Felicitas
12 months ago
Definitely the data owner! They control access.
AH
Ahmad
1 year ago
I’m leaning towards the risk manager being accountable, but I could be mixing it up with another topic we covered.
NO
Noemi
1 year ago
I feel like the end user should have some responsibility too, especially if they mishandle the data.
BA
Barabara
1 year ago
I remember a practice question where the IT department was held responsible for security measures, but I don't know if that applies here.
LA
Lavonna
1 year ago
I think the data owner is usually the one accountable for the information stored, but I'm not entirely sure.
SU
Susy
1 year ago
This seems like a straightforward question about stakeholder management. I'll focus on understanding the key reasons for segmenting stakeholders.
GA
Gail
1 year ago
This is a straightforward conceptual question, but the visuals make it a bit tricky. I'll need to rely on my understanding of data flow principles to select the right answer.
EL
Elbert
1 year ago
This question seems straightforward. I think the key is to focus on the requirements for the Cisco 3800 Series access points and the existing infrastructure.
PU
Pura
1 year ago
Okay, let me think this through. If I'm having an issue with a regular expression in a monitor stanza, the splunkd.log file would be a good place to start looking for clues. The btool.log might also have relevant information, but I'm leaning towards C, splunkd.log, as the most likely answer.
LA
Lazaro
1 year ago
I'm really unsure about savings being an injection. Isn't that more about money being held back rather than spent?
GW
Gwenn
1 year ago
Hmm, the question mentions the group membership is being changed, so I'm thinking the answer might involve synchronizing the Company A directory to ensure the new group assignments are applied correctly.
GL
Gladys
1 year ago
The end user has to be accountable, right? They're the ones actually putting the data on the shared drive. How hard is it to read a few security guidelines?
BE
Beth
1 year ago
It's important for all employees to understand the risks and responsibilities when using the shared drive.
SL
Slyvia
1 year ago
Yes, end users should take accountability for their actions when storing data on the shared drive.
EA
Earlean
1 year ago
End users are responsible for following security guidelines to prevent loss of confidential information.
DI
Dierdre
1 year ago
Wait, are we sure there's even any confidential information on this shared drive? Maybe the employees are just storing their cat photos and recipes. You know how that goes...
TI
Tijuana
1 year ago
I'm not so sure. The IT department is the one providing the shared drive, so they have a duty to ensure it's secure. This one's on them, in my opinion.
KI
Kimbery
1 year ago
Regular security training for employees can help prevent potential loss of confidential information.
AR
Arlene
1 year ago
It's a shared responsibility between the IT department and the employees to protect confidential information.
HO
Hollis
1 year ago
Employees should also be responsible for ensuring they are storing information securely on the shared drive.
AN
An
1 year ago
IT department should definitely be accountable for the risk of potential loss of confidential information.
CA
Caprice
1 year ago
True, it's a shared responsibility between the IT department and the employees to ensure data security.
DO
Doyle
1 year ago
Yes, employees should also be accountable for how they handle and store confidential information.
MI
Mitsue
1 year ago
But what about the employees who have access to the shared drive? Shouldn't they also be responsible?
IN
In
1 year ago
IT department should be accountable for the risk of potential loss of confidential information.
DO
Donte
1 year ago
But shouldn't the IT department also be accountable for ensuring the security of the shared drive?
AR
Arthur
2 years ago
The data owner is definitely responsible here. They should have set up proper access controls and data classification policies to protect sensitive information.
KE
Kenneth
1 year ago
The IT department can provide the tools, but ultimately it's up to the data owner to protect the information.
LE
Leonard
1 year ago
I agree, the data owner should have taken steps to prevent unauthorized access.
ME
Melvin
1 year ago
They should have set up proper access controls and data classification policies to protect sensitive information.
CA
Casie
1 year ago
The data owner is definitely responsible here.
RA
Ramonita
2 years ago
I agree with Rene, the data owner should be responsible for protecting confidential information.
RE
Rene
2 years ago
I think the data owner is accountable for the risk.