A. Ensures that adequate security is being provided by the necessary controls, password management, remote access controls, operating system configurations, and so on.

B. Integrates security considerations into application and system purchasing decisions and development projects.

C. Ensures that the systems are properly assessed for vulnerabilities and must report any to the incident response team and data owner.

D. Ensures that the necessary security controls are in place.