Which of the following are the common roles with regard to data in an information classification program? Each correct answer represents a complete solution. Choose all that apply.

The Custodian implements and maintains security controls on behalf of the data owner, such as applying access permissions and performing backups.

The User is an authorized individual who accesses and uses classified information in accordance with established policies.

The Security Auditor reviews and verifies that data classification controls are correctly applied and that classification policies are being followed.

Editor is not a recognized role in standard information classification programs; content-related responsibilities fall under the User or Owner role depending on the context.

The Owner is accountable for the data, determines its classification level, and authorizes who may access it.