Data ownership is the act of having legal rights and complete control over a single piece or set of data elements. It defines and provides information about the rightful owner of data assets and the acquisition, use and distribution policy implemented by the data owner.

The primary objective of proper separation of duties is to ensure that one person acting alone cannot compromise the company's security in any way. A proper separation of duties does not prevent employees from disclosing information, nor does it ensure that access controls are in place or that audit trails are not tampered with.
Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-
Hill/Osborne, 2002, Chapter 12: Operations Security (Page 808).

Explanation/Reference:
Explanation:
A protected string of characters, known as a password, is used to authenticate an individual.
Incorrect Answers:
A: The primary use of a password is not to allow access to files, it is to authenticate an individual.
B: The primary use of a password is not to identify an individual, it is to authenticate an individual.
D: The primary use of a password is not to divide various user's accesses, it is to authenticate an individual.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 192