RIPHAH INTERNATIONAL UNIVERSITY

Faculty of Computing

CYBER SECURITY
Bonus Assignment

Submitted by: Musheeza Liaquat

Submitted to: Ma’am Tehreem

Sap ID: 2583

Dated: 11, November 2020

 1.

User
 A user is any person who accesses data via
a computing system to accomplish work
tasks.
 Users have access to only the data they
need to perform their work tasks. You can
also think of users as employees or end
users.
Custodian
 A custodian is someone responsible for the
care of the asset.
 A custodian helps protect the integrity and
security of data by ensuring that it is
properly stored and protected.
 For example, custodians would ensure that
the data is backed up in accordance with a
backup policy. If administrators have
configured auditing on the data, custodians
would also maintain these logs.

2.

Asset owner System owner

 The asset owner is the person who owns
the asset that processes sensitive data.
 An asset owner is the person responsible
for the day-to-day management of assets.
 The system owner is the person who owns
the system that processes sensitive data.
 The system owner is responsible for
ensuring that data processed on the system
remains secure.
 The system owner is typically the same
person as the data owner, but it can
sometimes be someone different, such as
a different department head (DH).

3.

Administrators:
A data administrator is responsible for granting appropriate access to personnel. They don’t necessarily
have full administrator rights and privileges, but they do have the ability to assign permissions.
Administrators assign permissions based on the principles of least privilege and the need to know,
granting user’s access to only what they need for their job. Administrators typically assign permissions
using a Role Based Access Control model. In other words, they add user accounts to groups and then
grant permissions to the groups. When users no longer need access to the data, administrators remove
their account from the group.