A security administrator wants to implement a company-wide policy to empower data owners to manage and enforce access control rules on various resources. Which of the following should be implemented? 

Answer options:

A. Mandatory access control
B. Discretionary access control
C. Role based access control
D. Rule-based access control

B