Free CompTIA Security+ SY0-701 Practice Question

The Data Custodian/Steward is typically responsible for the daily management of data access, ensuring that data is accessible to those who need it while maintaining required security controls. A Data Owner sets the policy for data access, but it is the Data Custodian's/Steward's role to implement and manage these policies on a day-to-day basis. A Controller typically refers to an entity that determines the purposes, conditions, and means of processing personal data, and a Processor is responsible for processing personal data on behalf of a controller, neither of which directly manage day-to-day access.