Who owns the data?

Who owns the data? Here’s a coffee shop analogy you’ll never forget.

Everyone says “own the data.” But who owns what?
In security, there’s a big difference between a data owner, custodian, steward, asset owner, and business owner.

Let’s explain it like a coffee shop.

Imagine this:

• The Business Owner owns the coffee business.

• The Asset Owner owns the coffee machine.

• The Data Owner owns the secret recipe.

• The Data Custodian maintains and protects the recipe storage.

• The Data Steward ensures the recipe remains clean and consistent.

So if the espresso tastes wrong…

• The Data Owner says, “This isn’t our standard.”

• The Custodian checks the storage cabinet.

• The Steward reviews the version history.

• The Asset Owner checks if the machine is working.

• The Business Owner worries about lost customers.

In my CISSP world, every concept is a story, an art piece, or a visual representation. Join the CISSP As An Art (CaaART) tribe, the first visual-only CISSP course.