Who is BEST suited to determine whether a new control properly mitigates data loss risk within a system?

A. Control owner
B. Risk owner
C. Data owner
D. System owner