$24)$ In assigning roles to individuals in an organization to run risk management processes, the organization must ensure that there are no conflicts of interest when assigning the same individual to multiple risk management roles. Which of the role pairs below constitute the most conflict of interest? A$)$ System owner can also serve as data custodian. B$)$ System security officer can serve as system engineer. C$)$ Chief information security officer can serve as the risk executive, D$)$ Authorizing official can serve as system owner for systems they authorize.