Which of the following are the common roles with regard to data in an information classification program? Each correct answer represents a complete solution. Choose all that apply.

"Editor" is a general function someone might perform on data, but it is not typically recognized as a distinct, high-level role in information classification programs like owner, custodian, user, or auditor. It's more of an action than a specific, defined security role.

The data custodian is responsible for the technical implementation and maintenance of security controls and safeguards for the data as instructed by the data owner.

The data owner is typically a senior business manager ultimately accountable for the data, including its classification, protection requirements, and usage.

The data user interacts with the data in their daily tasks, adhering to the security policies and classification established by the owner and implemented by the custodian.

The security auditor independently reviews and assesses the information classification program and its controls to ensure compliance with policies and effectiveness in protecting data.