In this context, the internal IT team acts as data custodians. Data custodians are responsible for the safe custody, transport, storage, and overall safeguarding of data. They ensure that data is properly maintained and that access controls are in place, but they do not make decisions about data usage—that responsibility lies with data owners.
[Reference:ISACA CRISC Review Manual, 7th Edition, Chapter 4: Information Technology and Security, Section: Data Management Roles and Responsibilities., , , , , , , ]
Submit