A security administrator wants to implement a company-wide policy to empower data owners to manage and
enforce access control rules on various resources. Which of the following should be implemented?

A.
Mandatory access control

B.
Discretionary access control

C.
Role based access control

D.
Rule-based access control