Data custodian
- Term
- Data custodian
- Exam
- CISA & CISM
- Definition
The role that implements and maintains controls protecting data, often IT.
- Explained
Custodians — often IT or database teams — implement and operate the controls owners require: backups, access configuration, encryption. They act on the owner's decisions rather than making them.
- In practice
The database team applies the access rights the head of sales approved.
- Often confused with
- Data owner
- Exam angle
Custodians do not decide who gets access.
- Related