Ask the Expert

How would you define the responsibilities of a data custodian in a bank?

How would you define the roles and responsibilities of a data custodian in a bank? We are trying to form such a group, and we have a single person from each department taking on the responsibilities of data classification.

    Requires Free Membership to View

    Login

Data is the lifeblood of any financial institution. Not only is customer data heavily regulated, but analyzing the data and figuring out how to monetize it is one of the critical success factors for banks as the business continues to get more and more competitive.

The data custodian function assumes responsibility to build a policy to govern access to the data of the organization. This person or group takes a focused "inside-out" view of data access. In other words, they should start with the data and then determine who should be allowed to access it. And "who" is kind of a misnomer. We are not only dealing with people, but also applications and business processes. Firm access rules must be established and kept current as new types of data are gathered.

In ideal circumstances, the data custodian function needs to be managed by a cross-functional team because resources from all business units need access to the organization's data, and it's almost impossible to accurately reflect that access without having someone on the "inside" of those functions on the team to ensure their requirements are met.

Thus, someone within the security or risk team tends to chair the group, but representatives from all across the organization contribute to ensuring the rules reflect how they need to access and consume the data.

More information:

This was first published in February 2008

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top