Which of the following are the common roles with regard to data in an information classification program? Each correct answer represents a complete solution. Choose all that apply.

A.
Custodian

B.
Security auditor

C.
User

D.
Editor

E.
Owner

Explanation:

The following are the common roles with regard to data in an information classification program:
Owner
Custodian
User
Security auditor

The following are the responsibilities of the owner with regard to data in an information classification program:

Determining what level of classification the information requires. Reviewing the classification assignments at regular time intervals and making changes as the business needs change. Delegating the responsibility of the data protection duties to the custodian.

The following are the responsibilities of the custodian with regard to data in an information classification program:

Running regular backups and routinely testing the validity of the backup data Performing data restoration from the backups when necessary Controlling access, adding and removing privileges for individual users

The users must comply with the requirements laid out in policies and procedures. They must also exercise due care.

A security auditor examines an organization’s security procedures and mechanisms.

Reference: "http://en.wikipedia.org/wiki/Classified_information"