Section: Security Architecture and Engineering

"When the DES algorithm is applied to data, it divides the message into blocks and operates on them one at a time. A block is made of 64 bits and is divided in half and each character is encrypted one at a time. The characters are put through 16 rounds of transposition and substitution functions. The order and type of transposition and substitution function depend on the value of the key that is inputted into the algorithm. The result is the 64-bit block of ciphertext." Pg. 526 Shon Harris: CISSSP All-In-One Certification Guide

In Discretionary Access Control (DAC) environments, the user who creates a file is
also considered the owner and has full control over the file including the ability to set permissions
for that file.
The following answers are incorrect:
manager. Is incorrect because in Discretionary Access Control (DAC) environments it is the
owner/user that is authorized to grant information access to other people.
group leader. Is incorrect because in Discretionary Access Control (DAC) environments it is the
owner/user that is authorized to grant information access to other people.
security manager. Is incorrect because in Discretionary Access Control (DAC) environments it is
the owner/user that is authorized to grant information access to other people.
IMPORTANT NOTE:
The term Data Owner is also used within Classifications as well. Under the subject of classification
the Data Owner is a person from management who has been entrusted with a data set that
belongs to the company. For example it could be the Chief Financial Officer (CFO) who is
entrusted with all of the financial data for a company. As such the CFO would determine the
classification of the financial data and who can access as well. The Data Owner would then tell the
Data Custodian (a technical person) what the classification and need to know is on the specific set
of data.
The term Data Owner under DAC simply means whoever created the file and as the creator of the
file the owner has full access and can grant access to other subjects based on their identity.