Who should determine data access requirements for an application hosted at an organization's data center?

A. Business owner
B. Information security manager
C. Systems administrator
D. Data custodian