Senior management is concerned about the unauthorized use of third-party data that is stored within the enterprise's data repositories. Which of the following is the BEST way to address this concern?

While communicating consequences is important for deterrence, it is a reactive measure and doesn't proactively prevent unauthorized access or use as effectively as clearly defined ownership and accountability.

Encrypting data in transit protects against interception during transfer, but it does not address unauthorized use *once the data is stored* or accessed within the enterprise's repositories.

Establishing clear data ownership with defined accountabilities is the best way to address concerns about unauthorized use because it assigns specific individuals or roles the responsibility for managing, protecting, and authorizing access to the data, thereby reducing the likelihood of misuse. This foundational step ensures someone is accountable for enforcing policies and controls.

Establishing optimal retention periods addresses the duration of data storage, but it does not directly prevent unauthorized use during the period the data is legitimately retained.