An IS auditor should expect the responsibility for authorizing access rights to production
data and systems to be entrusted to the:
A.
process owners.
B.
system administrators.
C.
security administrator.
D.
data owners.
Explanation:
Data owners are primarily responsible for safeguarding the data and authorizing access to
production data on a need-to-know basis.