Who can best decide what are the adequate technical security controls in a computer-based application system in regards to the protection of the data being used...