The security responsibility of data custodians in an organization will include:

A.
assuming overall protection of information assets.

B.
determining data classification levels.

C.
implementing security controls in products they install.

D.
ensuring security measures are consistent with policy.

Explanation:

Security responsibilities of data custodians within an organization include ensuring that
appropriate security measures are maintained and are consistent with organizational policy.
Executive management holds overall responsibility for protection of the information assets. Data
owners determine data classification levels for information assets so that appropriate levels of
controls can be provided to meet the requirements relating to confidentiality, integrity and
availability. Implementation of information security in products is the responsibility of the IT
developers.