Which of the following roles is ULTIMATELY accountable for the protection of an organization's information?

A. The board of directors
B. The chief information security officer (CISO)
C. The data owner
D. The chief information officer (CIO)