Accountability for the maintenance of appropriate security measures over information assets resides with the:

A.
security administrator.

B.
systems administrator.

C.
data and systems owners.

D.
systems operations group.

Explanation:
Management should ensure that all information assets (data and systems) have an appointed owner who
makes decisions about classification and access rights. System owners typically delegate day-to-day
custodianship to the systems delivery/operations group and security responsibilities to a security administrator.
Owners, however, remain accountable for the maintenance of appropriate security measures.