CISA: Certified Information Systems Auditor

The information owner is accountable for classifying information because this role determines the data’s business sensitivity and the protection and handling requirements that follow. Technical and security roles support implementation and policy, but they do not make the business ownership decision. ISACA identifies information classification as a data-owner responsibility, including in cloud migrations.