Explanation
The role primarily assigned to an internal data owner is authorizing access rights. A data owner is a person or a role within the organization who has the authority and responsibility for the data assets under their control. A data owner is responsible for defining the data classification, data quality, data retention, and data security requirements for their data assets. A data owner is also responsible for granting, revoking, and reviewing the access rights to their data assets based on the principle of least privilege and the business needs. A data owner is accountable for ensuring that the data assets are used in compliance with the organizational policies and the applicable laws and regulations. References:
* [ISACA Glossary of Terms]
* [ISACA CDPSE Review Manual, Chapter 3, Section 3.2.1]
* [ISACA CDPSE Review Manual, Chapter 3, Section 3.2.2]
* [ISACA CDPSE Review Manual, Chapter 3, Section 3.2.3]