CISA Certified Information Systems Auditor – Question1241

Which of the following entities is BEST suited to define the data classification levels within an organization?

A.
Database administrator based on the data schema
B. Legal compliance team based on the application regulations
C. Business owner responsible for the respective data
D. System administrator responsible for data security controls

Correct Answer: C