The system (or application) owner is responsible for the management, operation, maintenance and level of protection provided by his system. The perspective of the system (or application) owner is that of the system holding and processing information, in contrast with the information custodian whose perspective is that of the information itself. |