Which of the following is the responsibility of information asset owners?
|
The information asset custodian is responsible for safeguarding the information, including implementing access control systems to prevent inappropriate disclosure, and making back-ups so that critical information will not be lost. Information asset custodians are individuals in physical or logical possession of information. Custodians are also required to implement, operate, and maintain the security measures defined by information asset owners. Show The information user is responsible for specific information assets, ensuring the security of the information and adhering to all information security policies, standards and procedures. Internal audit must check for compliance with related information security policies, standards and procedures. The Information Asset Owner is accountable to the SIRO for ensuring risks associated with handling confidential information are properly managed. The Owner is equivalent to the Data Owner as defined in the UCL Data Protection Policy. Within a study, this is typically the PI and must be a UCL employee, not an Honorary. The Owner must be in a position to mandate responsibilities within the team, such as training and will be in a position to secure funds and resources to ensure information will be properly handled within the study. If the PI is not employed by UCL then a similarly senior UCL staff member closely involved with the project should be appointed as Owner. In research this will most often be the UCL grant holder. Responsibilities of the Information Asset OwnerThe Information Asset Owner must ensure:
In addition, the Owner must ensure that all members of the study team understand their responsibilities. In particular, team members must receive Information Governance training before being given access to personal data. Many Owners will want someone they employ to be responsible for the day-to-day operations of a project such as assigning access rights to data. This is possible by assigning an information asset administrator ('Administrator'). Administrator responsibilities are outlined here. It is the responsibility of owners to define the criticality levels of information assets. Implementation of information security within an application is the responsibility of the data custodians. Implementation of access rules is a responsibility of data custodians. Provision of physical and logical security for data is the responsibility of the security administrator. Who is the information asset owner NHS?Information Asset Owner (IAO)
This includes records related to the asset and management of information risks pertaining to the asset. The IAO also ensures that the Information Asset Assistant, where appointed, carries out their duties to ensure that records are managed in line with guidance and policy.
Who should own an information asset register?Typically, this will be the person using the asset (if only one person uses it), or, in the case of shared assets, the person who has the responsibility across the whole organisation (e.g. the department head, or Chief Information Officer).
What is information asset user?An information asset is a body of knowledge that is organized and managed as a single entity. Like any other corporate asset, an organization's information assets have financial value. That value of the asset increases in direct relationship to the number of people who are able to make use of the information.
What is the importance of information assets?An information asset is a body of information, defined and managed as a single unit so it can be understood, shared, protected and exploited efficiently. Information assets have recognisable and manageable value, risk, content and lifecycles.
|
