Which of the following would be the BEST access control procedure? 
A、The data owner formally authorizes access and an administrator implements the user authorization tables. 
B、Authorized staff implements the user authorization tables and the data owner sanctions them. 
C、The data owner and an IS manager jointly create and update the user authorization tables. 
D、The data owner creates and updates the user authorization tables.