What is a Data Owner or Data Authority, and what are their responsibilities?

Each information asset containing Level 1 Data must have an identified Data Owner or Data Authority.

The Data Owner must classify the data and approve all users and uses of the data, storage locations for the data, and controls protecting the data.

Additional information about the Data Owner's responsibilities are defined in Section 7.1 of the SSU Information Security Management Program.