Who owns the data? Here’s a coffee shop analogy you’ll never forget.
Everyone says “own the data.” But who owns what?
In security, there’s a big difference between a data owner, custodian, steward, asset owner, and business owner.
Let’s explain it like a coffee shop.
Imagine this:
-
The Business Owner owns the coffee business.
-
The Asset Owner owns the coffee machine.
-
The Data Owner owns the secret recipe.
-
The Data Custodian maintains and protects the recipe storage.
-
The Data Steward ensures the recipe remains clean and consistent.
So if the espresso tastes wrong…
-
The Data Owner says, “This isn’t our standard.”
-
The Custodian checks the storage cabinet.
-
The Steward reviews the version history.
-
The Asset Owner checks if the machine is working.
-
The Business Owner worries about lost customers.
In my CISSP world, every concept is a story, an art piece, or a visual representation. Join the CISSP As An Art (CaaART) tribe, the first visual-only CISSP course.
