What is the MOST important role of an organization's data custodian in support of the information security function?

A. Evaluating data security technology vendors
B. Assessing data security risks to the organization
C. Approving access rights to departmental data
D. Applying approved security policies