A security administrator wants to implement a company-wide policy to empower data owners to manage and enforce access control rules on various resources. Which of the following should be implemented?

Mandatory Access Control (MAC) is a system-enforced access control model where access decisions are determined by a central security policy and cannot be overridden by resource owners, directly contradicting the goal of empowering data owners.

Discretionary Access Control (DAC) is an access control model where the owner of a resource explicitly defines and manages the permissions for other users to access that resource. This directly aligns with the stated policy of empowering data owners to manage and enforce access rules on their specific resources.

Role-Based Access Control (RBAC) assigns permissions to roles, and users are then assigned to roles, meaning access is managed based on job function rather than individual data owners directly controlling their specific resources.

Rule-based access control grants or denies access based on a set of predefined rules or conditions, often implemented in firewalls or network devices, rather than empowering individual resource owners to manage permissions.