Match the IT security governance role with its description.
| Data controller | A person who determines the purposes for which and how to process personal data. |
| Data custodian | A person who implements the classification and security controls for the data in accordance with the rules set out by the data owner. |
| Data protection officer | A person who oversees an organization’s data protection strategy. |
| Data processor | A person or organization processes personal data on behalf of the data controller. |
| Data steward | A person who ensures that data supports an organization’s business needs and meets regulatory requirements. |
| Data owner | A person who ensures compliance with policies and procedures assigns the proper classification to information assets and determines the criteria for accessing information assets. |
Related exam: Cybersecurity Essentials v3.0 Course Final Exam Answers
