CompTIA Security+ Exam Prep

Answer: B - The data owner decides upon the classification of data and is responsible for any negligent act that results in the corruption or disclosure of the data. The data owner is usually a member of management who is in charge of a specific business unit and who is ultimately responsible for the protection and use of a specific subset of information. The data owner is also responsible for ensuring that the necessary security controls are in place, defining security requirements per classification and backup requirements, approving any disclosure activities, ensuring that proper access rights are being used, and defining user access criteria.