The security responsibility of data custodians in an organization will include:

assuming overall protection of information assets. 

determining data classification levels. 

implementing security controls in products they install. 

ensuring security measures are consistent with policy.