What is the MOST important role of an organization’s data custodian in support of information security function?

A. Evaluating data security technology vendors
B. Applying approval security policies
C. Approving access rights to departmental data
D. Assessing data security risks to the organization