Study. uk . com
  1. Home
  2. All questions
  3. Question 610

CISM study material · question 610 of 1000

An information owner shares data with a partner organisation and considers protection now the partner's responsibility. What does NIST say?

  1. Responsibility is shared equally between both organisations
  2. Responsibility transfers with the data once a formal sharing agreement has been signed by both of the organisations
  3. The information owner retains that responsibility even when the data is shared with another organisation
  4. Responsibility passes to the receiving system's owner
Show the answer

Answer: C. The information owner retains that responsibility even when the data is shared with another organisation

SP 800-100 states in a footnote to the information owner's rules of behaviour responsibility that the information owner retains that responsibility even when the data or information is shared with other organisations.

Source: NIST SP 800-100 (NIST) — Sec. 8.2.3 Information Owner

Challenge yourself on this topic → Study as cards