Who is ultimately responsible to ensure that information assets are categorized and adequate
measures are taken to protect them?

A.
Data Custodian
B.
Executive Management
C.
Chief Information Security Officer
D.
Data/Information/Business Owners