It is usually responsible for maintaining and protecting the data. The following answers are incorrect: Data owner is usually a member of management , in charge of a specific business unit and is ultimately responsible for the protection and use of the information. User is any individual who routinely uses the data for work-related tasks. Security administrator’s tasks include creating new system user accounts , implementing new security software.
References : Shon Harris AIO v3 , Chapter -3: Security Management Practices , Pages : 99 -103