The data custodian is the role that is responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications. The data custodian is the person or entity that implements the security controls and procedures for the data, as defined by the data owner. The data custodian is also responsible for performing the technical tasks related to the data, such as backup, recovery, archiving, encryption, deletion, and auditing. The data custodian should ensure that the data is available, reliable, and secure, and that the data quality and integrity are preserved. The data reviewer, the data user, and the data owner are not the roles that are responsible for ensuring that important datasets are developed, maintained, and are accessible within their defined specifications. The data reviewer is the person or entity that verifies the accuracy, completeness, and validity of the data, and provides feedback or recommendations for improvement. The data user is the person or entity that accesses, uses, or benefits from the data, and may have different levels of permissions or restrictions depending on their role or function. The data owner is the person or entity that has the ultimate authority and responsibility over the data, and defines the security requirements and policies for the data. References:
* 1 (Domain 1: Security and Risk Management, Objective 1.5: Understand and apply concepts of data governance)
* 2 (Chapter 1: Security and Risk Management, Section 1.5.3: Data Governance)